CERTA-2010-AVI-557
Vulnerability from certfr_avis

Une vulnérabilité dans l'implémentation du serveur de messagerie Dovecot sur le système d'exploitation Mac OS X Server pourrait permettre à un utilisateur la lecture de messages qui ne lui sont pas destinés.

Description

Une vulnérabilité dans la gestion de la mémoire par le serveur de messagerie Dovecot sur le système d'exploitation Mac OS X Server pourrait permettre à un utilisateur malintentionné la lecture de messages d'autres utilisateurs.

Solution

Installer la version 10H575 de Mac OS X 10.6.5. Se référer au bulletin de sécurité de l'éditeur (cf. section Documentation).

None
Impacted products
Vendor Product Description
Apple N/A Mac OS X 10.6.0 à 10.6.5(version 10H574).
References

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mac OS X 10.6.0 \u00e0 10.6.5(version 10H574).",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la gestion de la m\u00e9moire par le serveur de\nmessagerie Dovecot sur le syst\u00e8me d\u0027exploitation Mac OS X Server\npourrait permettre \u00e0 un utilisateur malintentionn\u00e9 la lecture de\nmessages d\u0027autres utilisateurs.\n\n## Solution\n\nInstaller la version 10H575 de Mac OS X 10.6.5. Se r\u00e9f\u00e9rer au bulletin\nde s\u00e9curit\u00e9 de l\u0027\u00e9diteur (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-3793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3793"
    },
    {
      "name": "CVE-2010-4011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4011"
    }
  ],
  "initial_release_date": "2010-11-19T00:00:00",
  "last_revision_date": "2010-11-19T00:00:00",
  "links": [],
  "reference": "CERTA-2010-AVI-557",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-11-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans l\u0027impl\u00e9mentation du serveur de messagerie Dovecot\nsur le syst\u00e8me d\u0027exploitation Mac OS X Server pourrait permettre \u00e0 un\nutilisateur la lecture de messages qui ne lui sont pas destin\u00e9s.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Apple Mac OS X Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT4452 du 15 novembre 2010",
      "url": "http://support.apple.com/kb/HT4452"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…