84 matches found
PT-2013-2777
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue is related to the Disk Management in Apple Mac OS X, where it does not properly authenticate attempts to disable FileVault. This allows local users to cause a denial of service,...
Mac OS X FileVault Plaintext Password Logging
Plaintext passwords were discovered in a system log file. Mac OS X Lion release 10.7.3 enabled a debug logging feature that causes plaintext passwords to be logged to /var/log/secure.log on systems that use certain FileVault configurations. A local attacker in the admin group or an attacker with...
Apple Mac OS X filevault information leakage
Encrypted file system password is written in cleartext to log file...
Apple Legacy filevault barn door...
As someone said here recently, carefully built crypto has a unfortunate tendency to consist of three thick impregnable walls and a picket fence in the back with the gate left open. That seems to have happened to Apple's older "legacy" Filevault in the current release of MacOX Lion 10.7.3...
Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)
The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...
Apple Mac OS X FileVault纯文本密码本地安全限制绕过漏洞
BUGTRAQ ID: 53402 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 在使用"Legacy FileVault"时，FileVault中启用了调试开关，可导致将用户密码保存在纯文本的DEBUGLOG中，通过FireWire目标磁盘模式即可读取密码。成功利用需要OS X从较旧的版本升级并使用"Legacy FileVault"功能。 0 Apple MacOS X 10.7.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
Flaw in OS X Lion Encryption Leaves User Credentials in Plaintext
There’s a serious weakness in certain versions of Apple OS X that causes the operating system to store users’ login credentials for the FileVault encrypted storage in plaintext. The bug, which is found in older versions of FileVault present on OS X Lion 10.7.3 systems, enables anyone with admin...
CVE-2011-3212
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...
Information disclosure
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...
CVE-2011-3212
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...
CVE-2011-3212
CVE-2011-3212 affects Apple Mac OS X 10.7 prior to 10.7.2, where CoreStorage during FileVault enablement may not encrypt all disk data, enabling physically proximate attackers to read sensitive data from the disk. The description does not specify a fixed remediation in the provided documents; upg...
PT-2011-4305
Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.7 before 10.7.2 Description The issue allows physically proximate attackers to obtain sensitive information by reading directly from the disk device, due to incomplete encryption of disk data during the enabling of...
CVE-2011-3212: Undefined Security Weakness
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...
Apple Revamps Security in OS X Lion
Apple has released the newest version of its OS X operating system, dubbed Lion, and it includes a batch of new security protections that bring it up to the level of Windows and Internet Explorer. The most significant additions, experts say, is the full implementation of ASLR and a sandbox that...
MOAB-13-01-2007: Apple DMG HFS+ do_hfs_truncate() Denial of Service Vulnerability
Summary A specially crafted HFS+ filesystem in a DMG image can cause the dohfstruncate function to panic the kernel denial of service, when attempting to remove a file from the mounted filesystem. This issue can't lead to arbitrary code execution, although there's a significant risk of local HFS+...
Design/Logic Flaw
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled...
CVE-2006-0386
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled...
CVE-2006-0386
CVE-2006-0386 affects FileVault in Mac OS X 10.4.5 and earlier. The issue arises when creating a FileVault image: user directories are not properly mounted, allowing local users to access files that should be protected while FileVault is enabled. Documented impact is partial confidentiality; no e...
CVE-2006-0386
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled...
CVE-2006-0386: Undefined Security Weakness
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled...