CVE-2014-4446 Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunisti...
LowCVSS 2.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple os x server | <= 3.1.2 | No fix listed |
References
- APPLE-SA-2014-10-16-3 vendor-advisory
- 1031071 vdb-entry
- macosx-cve20144446-dos(97645) vdb-entry
- support.apple.com vendor-advisory