Lucene search
HistoryNov 10, 2009 - 7:30 p.m.
CVE-2009-2836
cve-2009-2836
login window
apple
mac os x
race condition
password authentication
security vulnerability
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.3%
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors.
Affected configurations
Node
applemac_os_xMatch10.6
ORapplemac_os_xMatch10.6.1
Node
applemac_os_x_serverMatch10.6
ORapplemac_os_x_serverMatch10.6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | eq | 10.6 |
| apple:mac_os_x | apple mac os x | eq | 10.6.1 |
Related
cvelist
cvelist
CVE-2009-2836
2009-11-10 19:00:00
nvd
nvd
CVE-2009-2836
2009-11-10 19:30:01
prion
prion
Race condition
2009-11-10 19:30:00
nessus
nessus
Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities
2009-11-09 00:00:00
openvas
openvas
Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006
2010-05-12 00:00:00
Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006
2010-05-12 00:00:00
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.3%
Related for CVE-2009-2836