CVE-2009-2836

Опубликовано: 10 нояб. 2009

Источник: nvd

CVSS2: 6.2

EPSS Низкий

Описание

Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT3937
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36956
Patch
http://www.vupen.com/english/advisories/2009/3184
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT3937
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36956
Patch
http://www.vupen.com/english/advisories/2009/3184

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.0004

Низкий

6.2 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

GHSA-xqhc-47rf-rgjc

github

почти 4 года назад