CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.1 | $0-$5k | 0.00 |
A vulnerability classified as critical has been found in Apple MacOS X up to 10.10.2 (Operating System). Affected is an unknown part of the component Apache. The manipulation with an unknown input leads to a config vulnerability. CWE is classifying the issue as CWE-16. This is going to have an impact on integrity. CVE summarizes:
CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.
The weakness was published 04/08/2015 as HT204659 as confirmed advisory (Website). The advisory is shared for download at support.apple.com. This vulnerability is traded as CVE-2013-0118 since 12/06/2012. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.004. The advisory points out:
Multiple vulnerabilities existed in Apache versions prior to 2.4.10 and 2.2.29, including one that may allow a remote attacker to execute arbitrary code. These issues were addressed by updating Apache to versions 2.4.10 and 2.2.29
The vulnerability scanner Nessus provides a plugin with the ID 82700 (Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family MacOS X Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 123515 (Apple Mac OS X v10.10.3 and Security Update 2015-004 Not Installed (APPLE-SA-2015-04-08-2)).
Upgrading to version 10.10.3 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (82351) and Tenable (82700). Similar entries are available at 69184, 73926, 73927 and 63626.
Product
Type
Vendor
Name
Version
License
Support
- end of life
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 5.1
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: ConfigCWE: CWE-16
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 82700
Nessus Name: Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Port: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
Exposure Time: 🔍
Upgrade: MacOS X 10.10.3
Timeline
12/06/2012 🔍02/22/2013 🔍
02/22/2013 🔍
02/24/2013 🔍
04/08/2015 🔍
04/08/2015 🔍
04/08/2015 🔍
04/10/2015 🔍
04/10/2015 🔍
04/12/2015 🔍
09/22/2022 🔍
Sources
Vendor: apple.comAdvisory: HT204659
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2013-0118 (🔍)
X-Force: 82351
SecurityTracker: 1032048 - Apple OS X Multiple Bugs Let Remote and Local Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Deny Service
Vulnerability Center: 49449 - Apple MacOS X <10.10.3 Remote Code Execution due to Vulnerability in Apache - CVE-2013-0118, Medium
SecurityFocus: 58128 - CS-Cart CVE-2013-0118 Security Bypass Vulnerability
scip Labs: https://www.scip.ch/en/?labs.20180712
See also: 🔍
Entry
Created: 04/10/2015 10:22Updated: 09/22/2022 15:49
Changes: 04/10/2015 10:22 (72), 06/25/2017 08:34 (8), 05/03/2022 09:15 (3), 09/22/2022 15:49 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.