Apple Mac OS X Application Firewall Unauthorized Network Access Weakness

Bugtraq ID:	26460
Class:	Design Error
CVE:	CVE-2007-4703
Remote:	Yes
Local:	No
Published:	Nov 15 2007 12:00AM
Updated:	Nov 15 2007 11:04PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Apple Mac OS X Server 10.5 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.5.1 Apple Mac OS X 10.5.1

Apple Mac OS X Application Firewall Unauthorized Network Access Weakness

Apple Mac OS X is prone to a weakness that results in unauthorized network access to certain applications.

This issue affects the Application Firewall when the 'Set access for specific services and applications' setting is enabled for certain applications.

This weakness exposes the computer to unauthorized remote access and can lead to a false sense of security.

Apple Mac OS X Application Firewall Unauthorized Network Access Weakness

No specific exploit is required to leverage this issue. An application that users think is blocked is actually exposed to remote connections.

Apple Mac OS X Application Firewall Unauthorized Network Access Weakness

Solution:
Apple released a security advisory and fixes to address this issue. Please see the references for more information.


Apple Mac OS X 10.5

• Apple Mac OS X 10.5.1 Update
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16133&cat= 60&platform=osx&method=sa/MacOSXUpd10.5.1.dmg

Apple Mac OS X Server 10.5

• Apple Mac OS X Server 10.5.1 Update
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16134&cat= 60&platform=osx&method=sa/MacOSXServerUpd10.5.1.dmg

Apple Mac OS X Application Firewall Unauthorized Network Access Weakness

References:

• About the security content of the Mac OS X 10.5.1 Update (client and server) (Apple)
  
• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)