Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
BID:28368
Info
Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
| Bugtraq ID: | 28368 |
| Class: | Design Error |
| CVE: |
CVE-2008-0046 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 18 2008 12:00AM |
| Updated: | Mar 24 2008 04:20PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
Apple Mac OS X is prone to security weakness that may result in unsafe firewall configurations.
Successfully exploiting this issue will cause unsuspecting users to establish unsafe firewall configurations, resulting in a false sense of security. This may lead to other attacks.
NOTE: This vulnerability was previously covered in BID 28304 (Apple Mac OS X 2008-002 Multiple Security Vulnerabilities), but has been given its own record to better document the issue.
Apple Mac OS X is prone to security weakness that may result in unsafe firewall configurations.
Successfully exploiting this issue will cause unsuspecting users to establish unsafe firewall configurations, resulting in a false sense of security. This may lead to other attacks.
NOTE: This vulnerability was previously covered in BID 28304 (Apple Mac OS X 2008-002 Multiple Security Vulnerabilities), but has been given its own record to better document the issue.
Exploit / POC
Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
A specific exploit is not required. Since firewall settings may be misconfigured, the system may be more susceptible to other attacks.
A specific exploit is not required. Since firewall settings may be misconfigured, the system may be more susceptible to other attacks.
Solution / Fix
Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
Solution:
The vendor released an advisory and fixes. Please see the references for more information.
Apple Mac OS X 10.5.2
Apple Mac OS X Server 10.5.2
Solution:
The vendor released an advisory and fixes. Please see the references for more information.
Apple Mac OS X 10.5.2
-
Apple SecUpd2008-002.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002.dmg
Apple Mac OS X Server 10.5.2
References
Apple Mac OS X Application Firewall German Translation Insecure Configuration Weakness
References:
References:
- Mac OS X Homepage (Apple)
- Mac OS X Server Homepage (Apple)