Apple Mac OS X Mobile Device Management Local Information Disclosure Vulnerability

Bugtraq ID:	62377
Class:	Design Error
CVE:	CVE-2013-1030
Remote:	No
Local:	Yes
Published:	Sep 12 2013 12:00AM
Updated:	Sep 12 2013 12:00AM
Credit:	Per Olofsson of University of Gothenburg
Vulnerable:	Apple Mac OS X Server 10.7.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.7.5 Apple Mac OS X 10.8.3 Apple Mac OS X 10.8
Not Vulnerable:	Apple Mac OS X 10.8.5

Apple Mac OS X Mobile Device Management Local Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X Mobile Device Management Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Apple Mac OS X 10.8.3

• Apple OSXUpdCombo10.8.5.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.8

• Apple OSXUpdCombo10.8.5.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.7.5

• Apple For OS X Lion Server 10.7.5 SecUpdSrvr2013-004.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.7.5

• Apple For OS X Lion 10.7.5 SecUpd2013-004.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.8.4

• Apple OSXUpd10.8.5.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Mobile Device Management Local Information Disclosure Vulnerability

References:

• About the security content of OS X Mountain Lion v10.8.5 and Security Update 201 (Apple)