CVE-2008-4223

Apple Mac OS X Server < 10.5.5 - Authentication Bypass

Title source: rule

Description

Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors.

References (8)

[Vendor Advisory] http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html

[Vendor Advisory] http://secunia.com/advisories/33179

[Vendor Advisory] http://support.apple.com/kb/HT3338

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1021409

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA08-350A.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32839

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32870

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/3444

Scores

EPSS 0.0167

EPSS Percentile 81.9%

Classification

CWE

CWE-287

Status draft

Affected Products (6)

apple/mac_os_x_server < 10.5.5

apple/mac_os_x_server

Timeline

Published Dec 17, 2008

Tracked Since Feb 18, 2026