CVE-2007-5863 Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between the client and the server, using a modified distribution de...
HighCVSS 9.3
EPSS 23.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.5.1 | No fix listed |
| apple mac os x server | = 10.5.1 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-12-17 vendor-advisory
- 28136 third-party-advisory
- 1019106 vdb-entry
- 20071217 Apple OS X Software Update Remote Command Execution mailing-list
- 26908 vdb-entry
- TA07-352A third-party-advisory us-government-resource
- ADV-2007-4238 vdb-entry
- macos-software-update-command-execution(39111) vdb-entry