Description
The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions.
References (7)
Core 7
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27695
Patch vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38479
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26460
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3897
Patch x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=307004
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1018958
Scores
EPSS
0.0259
EPSS Percentile
83.7%
Details
Status
published
Products (2)
apple/mac_os_x
10.5
apple/mac_os_x_server
10.5
Published
Nov 15, 2007
Tracked Since
Feb 18, 2026