CVE-2009-0015: Medium severity Apple iOS and macOS vulnerability
Published Feb 13, 2009
·Updated
Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to "credential management."
Affected Software
2 affected components
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.5.6
Remediation
Event History
Feb 13, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0015?
The severity of CVE-2009-0015 is classified as low since it allows local users to access sensitive information but does not allow remote exploitation.
2
How do I fix CVE-2009-0015?
To fix CVE-2009-0015, you should update to a more recent version of Mac OS X that addresses this vulnerability.
3
Who is affected by CVE-2009-0015?
CVE-2009-0015 affects local users of Apple Mac OS X 10.5.6 and Apple Mac OS X Server 10.5.6.
4
What kind of information can be disclosed due to CVE-2009-0015?
CVE-2009-0015 can disclose sensitive information including filesystem activities and directory names.
5
When was CVE-2009-0015 disclosed?
CVE-2009-0015 was disclosed in February 2009.