CVE-2009-0152: High severity Apple iOS and macOS vulnerability
Published May 13, 2009
·Updated
iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected Software
16 affected components
Apple iOS and macOS>=10.5.0<10.5.7
Apple Mac OS X Server>=10.5.0<10.5.7
Apple Mac OS X Server=10.5.2
Apple iOS and macOS=10.5.6
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.5.5
Apple iOS and macOS=10.5.1
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple iOS and macOS=10.5.2
Apple iOS and macOS=10.5.4
Remediation
Patch Available
Event History
May 13, 2009
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-0152?
CVE-2009-0152 is classified as a medium severity vulnerability.
2
How do I fix CVE-2009-0152?
To fix CVE-2009-0152, update your Apple Mac OS X to version 10.5.7 or later.
3
What versions of Mac OS X are affected by CVE-2009-0152?
CVE-2009-0152 affects Apple Mac OS X versions 10.5.0 through 10.5.6.
4
What kind of information can be compromised due to CVE-2009-0152?
Due to CVE-2009-0152, sensitive information transmitted via AOL Instant Messenger (AIM) could be compromised.
5
How does CVE-2009-0152 affect SSL settings in iChat?
CVE-2009-0152 causes iChat to disable SSL for AIM communication, ignoring user-configured SSL settings.