5

CVE-2008-3617

Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ApplemacOS X Version10.5
ApplemacOS X Version10.5.1
ApplemacOS X Version10.5.2
ApplemacOS X Version10.5.3
ApplemacOS X Version10.5.4
ApplemacOS X Server Version10.5
ApplemacOS X Server Version10.5.1
ApplemacOS X Server Version10.5.2
ApplemacOS X Server Version10.5.3
ApplemacOS X Server Version10.5.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.5% 0.708
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
Patch
http://www.us-cert.gov/cas/techalerts/TA08-260A.html
US Government Resource
http://www.vupen.com/english/advisories/2008/2584
http://www.securityfocus.com/bid/31189
Patch
http://securitytracker.com/id?1020882
https://exchange.xforce.ibmcloud.com/vulnerabilities/45174