Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue."
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html | Patch Vendor Advisory |
http://support.apple.com/kb/HT4077 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-03-30 11:30
Updated : 2010-03-30 21:00
NVD link : CVE-2010-0500
Mitre link : CVE-2010-0500
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
apple
- mac_os_x
- mac_os_x_server