Apple Mac OS X Time Machine CVE-2012-0675 Security Bypass Vulnerability

Bugtraq ID:	53470
Class:	Unknown
CVE:	CVE-2012-0675
Remote:	Yes
Local:	No
Published:	May 09 2012 12:00AM
Updated:	May 09 2012 12:00AM
Credit:	Renaud Deraison of Tenable Network Security
Vulnerable:	Apple Mac OS X Server 10.7.3 Apple Mac OS X Server 10.7.2 Apple Mac OS X Server 10.7.1 Apple Mac OS X Server 10.7 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X 10.7
Not Vulnerable:	Apple Mac OS X Server 10.7.4 Apple Mac OS X 10.7.4

Apple Mac OS X Time Machine CVE-2012-0675 Security Bypass Vulnerability

Apple Mac OS X is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and disclose sensitive information.

The following versions are affected:

Apple OS X Lion 10.7 through v10.7.3
Apple OS X Lion Server 10.7 through 10.7.3

Note: This issue was previously discussed in BID 53445 (Apple Mac OS X Security Update 2012-002 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Apple Mac OS X Time Machine CVE-2012-0675 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Mac OS X 10.7.1

• Apple MacOSXUpdCombo10.7.4.dmg
  For OS X Lion v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.3

• Apple MacOSXServerUpd10.7.4.dmg
  For OS X Lion Server v10.7.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7.2

• Apple MacOSXUpdCombo10.7.4.dmg
  For OS X Lion v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7

• Apple MacOSXServerUpdCombo10.7.4.dmg
  For OS X Lion Server v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.1

• Apple MacOSXServerUpdCombo10.7.4.dmg
  For OS X Lion Server v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7.3

• Apple MacOSXUpd10.7.4.dmg
  For OS X Lion v10.7.3
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.2

• Apple MacOSXServerUpdCombo10.7.4.dmg
  For OS X Lion Server v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7

• Apple MacOSXUpdCombo10.7.4.dmg
  For OS X Lion v10.7 and v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac OS X Time Machine CVE-2012-0675 Security Bypass Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• Security Update 2012-002 (Apple)