Apple Max OS X Application Firewall Launchd Firewall Bypass Weakness

Bugtraq ID:	26459
Class:	Design Error
CVE:	CVE-2007-4704
Remote:	Yes
Local:	No
Published:	Nov 15 2007 12:00AM
Updated:	Nov 15 2007 10:24PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Apple Mac OS X Server 10.5 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.5.1 Apple Mac OS X 10.5.1

Apple Max OS X Application Firewall Launchd Firewall Bypass Weakness

Apple Mac OS X is prone to a weakness regarding firewall settings and processes started by 'launchd'.

This issue may result in a false sense of security and leave certain processes vulnerable to external attack.

This issue affects Mac OS X 10.5 and Mac OS X Server 10.5; earlier versions are not affected.

Apple Max OS X Application Firewall Launchd Firewall Bypass Weakness

Specific exploit code does not apply to this weakness. However, improper firewall settings may leave a computer prone to other attacks.

Apple Max OS X Application Firewall Launchd Firewall Bypass Weakness

Solution:
The vendor has released Mac OS X 10.5.1 (Client and Server) to address this issue.


Apple Mac OS X 10.5

• Apple Mac OS X 10.5.1 Update
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16133&cat= 60&platform=osx&method=sa/MacOSXUpd10.5.1.dmg

Apple Mac OS X Server 10.5

• Apple Mac OS X Server 10.5.1 Update
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16134&cat= 60&platform=osx&method=sa/MacOSXServerUpd10.5.1.dmg

Apple Max OS X Application Firewall Launchd Firewall Bypass Weakness

References:

• About the security content of the Mac OS X 10.5.1 Update (client and server) (Apple)
  
• Mac OS X Homepage (Apple)