First published: Tue Mar 30 2010(Updated: )
Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.5.8 | |
Apple Mac OS X Server | =10.5.2 | |
macOS Yosemite | =10.5.6 | |
Apple Mac OS X Server | =10.5.8 | |
macOS Yosemite | =10.5.5 | |
Apple Mac OS X Server | =10.5.5 | |
macOS Yosemite | =10.5.1 | |
Apple Mac OS X Server | =10.5.1 | |
Apple Mac OS X Server | =10.5.6 | |
macOS Yosemite | =10.5.3 | |
macOS Yosemite | =10.5.0 | |
Apple Mac OS X Server | =10.5.0 | |
Apple Mac OS X Server | =10.5.3 | |
macOS Yosemite | =10.5 | |
Apple Mac OS X Server | =10.5.4 | |
macOS Yosemite | =10.5.2 | |
Apple Mac OS X Server | =10.5.7 | |
Apple Mac OS X Server | =10.6.1 | |
macOS Yosemite | <=10.6.2 | |
macOS Yosemite | =10.6.1 | |
Apple Mac OS X Server | =10.6.0 | |
macOS Yosemite | =10.6.0 | |
macOS Yosemite | =10.5.7 | |
Apple Mac OS X Server | =10.5 | |
Apple Mac OS X Server | <=10.6.2 | |
macOS Yosemite | =10.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0498 is rated as a medium severity vulnerability due to its potential to allow local users to gain elevated privileges.
To fix CVE-2010-0498, update your Apple Mac OS X to version 10.6.3 or later.
CVE-2010-0498 affects Apple Mac OS X versions prior to 10.6.3, including several 10.5.x versions.
CVE-2010-0498 is a local privilege escalation vulnerability and cannot be exploited remotely.
CVE-2010-0498 is a directory services authorization vulnerability that allows local privilege escalation.