Design/Logic Flaw

2010-03-3018:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.7%

JSON

Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a “plist injection issue.”

CPENameOperatorVersion
mac_os_xeq10.5.8
mac_os_xeq10.5.6
mac_os_xeq10.5.5
mac_os_xeq10.5.1
mac_os_xeq10.5.3
mac_os_xeq10.5.0
mac_os_xeq10.5
mac_os_xeq10.5.2
mac_os_xle10.6.2
mac_os_xeq10.6.1

Name	Operator	Version
mac_os_x	eq	10.5.8
mac_os_x	eq	10.5.6
mac_os_x	eq	10.5.5
mac_os_x	eq	10.5.1
mac_os_x	eq	10.5.3
mac_os_x	eq	10.5.0
mac_os_x	eq	10.5
mac_os_x	eq	10.5.2
mac_os_x	le	10.6.2
mac_os_x	eq	10.6.1