CVE-2013-5229

Apple OS X < 10.9 & Remote Desktop < 3.7 - Unauthenticated Command Execution

Title source: llm
STIX 2.1

Description

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177
Vendor Advisory x_refsource_confirm
http://jvn.jp/en/jp/JVN56210048/741993/index.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034187
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN56210048/index.html

Scores

EPSS 0.0034
EPSS Percentile 26.1%

Details

CWE
CWE-254
Status published
Products (2)
apple/apple_remote_desktop < 3.6.2
apple/mac_os_x < 10.8.5
Published Nov 14, 2015
Tracked Since Feb 18, 2026