CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.0 | $0-$5k | 0.00 |
A vulnerability was found in Apple Mac OS X up to 10.5.0 (Operating System). It has been classified as critical. Affected is an unknown part. The manipulation with an unknown input leads to a credentials management vulnerability. CWE is classifying the issue as CWE-255. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:
MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."
The weakness was published 08/05/2009 by Chris Evans with Google Security Team (Website). The advisory is available at us-cert.gov. This vulnerability is traded as CVE-2009-2192. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1552 by the MITRE ATT&CK project.
The vulnerability scanner Nessus provides a plugin with the ID 40502 (Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family MacOS X Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 116547 (Apple Mac OS X 10.5.8 and Security Update 2009-003 Not Installed (APPLE-SA-2009-08-05-1)).
Upgrading to version 10.5.1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (52432) and Tenable (40502). Similar entries are available at 3959, 4017, 4132 and 41542.
Product
Type
Vendor
Name
Version
License
Support
- end of life
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.3VulDB Meta Temp Score: 7.0
VulDB Base Score: 7.3
VulDB Temp Score: 7.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Credentials managementCWE: CWE-255
ATT&CK: T1552
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 40502
Nessus Name: Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
OpenVAS ID: 102036
OpenVAS Name: get_kb_item(ssh/login/osx_name
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Mac OS X 10.5.1
Timeline
06/24/2009 🔍08/05/2009 🔍
08/05/2009 🔍
08/05/2009 🔍
08/06/2009 🔍
08/06/2009 🔍
08/08/2009 🔍
10/20/2009 🔍
03/18/2015 🔍
08/13/2021 🔍
Sources
Vendor: apple.comAdvisory: us-cert.gov
Researcher: Chris Evans
Organization: Google Security Team
Status: Not defined
Confirmation: 🔍
CVE: CVE-2009-2192 (🔍)
X-Force: 52432
Vulnerability Center: 23817 - Apple Mac OS X 10.5 before 10.5.8 MobileMe Session Hijacking Vulnerability, High
SecurityFocus: 35954 - Apple Mac OS X 2009-003 Multiple Security Vulnerabilities
OSVDB: 56839 - Apple Mac OS X MobileMe Preference Pane Signout Credential Deletion Session Hijacking Weakness
scip Labs: https://www.scip.ch/en/?labs.20150108
See also: 🔍
Entry
Created: 03/18/2015 15:15Updated: 08/13/2021 14:46
Changes: 03/18/2015 15:15 (65), 02/16/2017 09:53 (10), 08/13/2021 14:42 (4), 08/13/2021 14:46 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.