Описание
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- Patch
- Vendor Advisory
- PatchVendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00747
Низкий
5 Medium
CVSS2
Дефекты
CWE-255
Связанные уязвимости
github
почти 4 года назад
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.
EPSS
Процентиль: 73%
0.00747
Низкий
5 Medium
CVSS2
Дефекты
CWE-255