Description
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
References (7)
Core 7
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27695
Patch vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3897
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=307004
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26461
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1018958
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38506
Scores
EPSS
0.0225
EPSS Percentile
81.1%
Details
Status
published
Products (2)
apple/mac_os_x
10.5
apple/mac_os_x_server
10.5
Published
Nov 15, 2007
Tracked Since
Feb 18, 2026