CVE-2002-0676

Summary: CVE-2002-0676 refers to SoftwareUpdate for MacOS 10.1.x, which reportedly downloads updates without authentication. This could allow an attacker to impersonate the Apple update server via DNS spoofing or cache poisoning and deliver Trojan Horse updates, enabling arbitrary code execution ...

CVE-2002-0676

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates...