Design/Logic Flaw

2009-11-1019:30:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack).

CPENameOperatorVersion
mac_os_x_servereq10.4.3
mac_os_x_servereq10.3.2
mac_os_x_servereq10.1.5
mac_os_x_servereq10.1
mac_os_x_servereq10.3.0
mac_os_x_servereq10.2.2
mac_os_x_servereq10.1.1
mac_os_x_servereq10.2.4
mac_os_x_servereq10.2.0
mac_os_x_servereq10.5.2

Name	Operator	Version
mac_os_x_server	eq	10.4.3
mac_os_x_server	eq	10.3.2
mac_os_x_server	eq	10.1.5
mac_os_x_server	eq	10.1
mac_os_x_server	eq	10.3.0
mac_os_x_server	eq	10.2.2
mac_os_x_server	eq	10.1.1
mac_os_x_server	eq	10.2.4
mac_os_x_server	eq	10.2.0
mac_os_x_server	eq	10.5.2