CVE-2010-0500: Input Validation
Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0500?
CVE-2010-0500 is classified as a denial of service vulnerability, which can severely affect the availability of SSH services.
How do I fix CVE-2010-0500?
To fix CVE-2010-0500, update your Apple Mac OS X to version 10.6.3 or later, which contains the necessary security patches.
What versions of macOS are affected by CVE-2010-0500?
CVE-2010-0500 affects various versions of macOS including versions 10.5.0 to 10.6.2.
What type of attack does CVE-2010-0500 enable?
CVE-2010-0500 enables remote attackers to cause a denial of service by blacklisting arbitrary SSH clients.
Is CVE-2010-0500 related to DNS vulnerabilities?
Yes, CVE-2010-0500 is related to improper validation of DNS PTR records that could be manipulated by attackers.