Apple Mac OS X Mail Parental Control White List Security Bypass Vulnerability

Bugtraq ID:	42904
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2010 12:00AM
Updated:	Sep 01 2010 12:00AM
Credit:	Jonathan Kamens
Vulnerable:	Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Mail Parental Control White List Security Bypass Vulnerability

Apple Mac OS X is prone to a security-bypass vulnerability in Mail.

Attackers can exploit this issue to add arbitrary email addresses to a user's whitelist. Successfully exploiting this issue will lead to other attacks.

Apple Mac OS X Mail Parental Control White List Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].