CVE-2008-4237 Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact....
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | <= 10.5.5 | No fix listed |
| apple mac os x | = 10.5 | No fix listed |
| apple mac os x | = 10.5.1 | No fix listed |
| apple mac os x | = 10.5.2 | No fix listed |
| apple mac os x | = 10.5.3 | No fix listed |
| apple mac os x | = 10.5.4 | No fix listed |
| apple mac os x server | <= 10.5.5 | No fix listed |
| apple mac os x server | = 10.5 | No fix listed |
| apple mac os x server | = 10.5.1 | No fix listed |
| apple mac os x server | = 10.5.2 | No fix listed |
| apple mac os x server | = 10.5.3 | No fix listed |
| apple mac os x server | = 10.5.4 | No fix listed |
References
- APPLE-SA-2008-12-15 vendor-advisory
- 33179 third-party-advisory vendor-advisory
- support.apple.com vendor-advisory
- 32839 vdb-entry
- 32880 vdb-entry
- 1021407 vdb-entry
- TA08-350A third-party-advisory us-government-resource
- ADV-2008-3444 vdb-entry