CVE Daily

CVE-2009-2829

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authenti...

Medium CVSS 5.0

Overview

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.

CWE: CWE-255 Published: 2009-11-10T19:30:01.377
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags