CVE-2011-0189

2011-03-2302:00:06

CWE-16

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

50.3%

JSON

The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities.

Affected configurations

Nvd

Node

appleterminal

applemac_os_xMatch10.6.0

applemac_os_xMatch10.6.1

applemac_os_xMatch10.6.2

applemac_os_xMatch10.6.3

applemac_os_xMatch10.6.4

applemac_os_xMatch10.6.5

applemac_os_xMatch10.6.6

Node

appleterminal

applemac_os_x_serverMatch10.6.0

applemac_os_x_serverMatch10.6.1

applemac_os_x_serverMatch10.6.2

applemac_os_x_serverMatch10.6.3

applemac_os_x_serverMatch10.6.4

applemac_os_x_serverMatch10.6.5

applemac_os_x_serverMatch10.6.6

VendorProductVersionCPE
appleterminal*cpe:2.3:a:apple:terminal:*:*:*:*:*:*:*:*
applemac_os_x10.6.0cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*
applemac_os_x10.6.1cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*
applemac_os_x10.6.2cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*
applemac_os_x10.6.3cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*
applemac_os_x10.6.4cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*
applemac_os_x10.6.5cpe:2.3:o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*
applemac_os_x10.6.6cpe:2.3:o:apple:mac_os_x:10.6.6:*:*:*:*:*:*:*
applemac_os_x_server10.6.0cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*
applemac_os_x_server10.6.1cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	terminal	*	cpe:2.3:a:apple:terminal::::::::
apple	mac_os_x	10.6.0	cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*
apple	mac_os_x	10.6.1	cpe:2.3:o:apple:mac_os_x:10.6.1:::::::*
apple	mac_os_x	10.6.2	cpe:2.3:o:apple:mac_os_x:10.6.2:::::::*
apple	mac_os_x	10.6.3	cpe:2.3:o:apple:mac_os_x:10.6.3:::::::*
apple	mac_os_x	10.6.4	cpe:2.3:o:apple:mac_os_x:10.6.4:::::::*
apple	mac_os_x	10.6.5	cpe:2.3:o:apple:mac_os_x:10.6.5:::::::*
apple	mac_os_x	10.6.6	cpe:2.3:o:apple:mac_os_x:10.6.6:::::::*
apple	mac_os_x_server	10.6.0	cpe:2.3:o:apple:mac_os_x_server:10.6.0:::::::*
apple	mac_os_x_server	10.6.1	cpe:2.3:o:apple:mac_os_x_server:10.6.1:::::::*