CVE-2010-0502: Medium severity Apple Mac OS X Server vulnerability
Published Mar 30, 2010
·Updated
iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type.
Affected Software
13 affected components
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.5.5
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.5.7
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.0
Apple Mac OS X Server=10.5
Apple Mac OS X Server<=10.6.2
Remediation
Patch Available
Event History
Mar 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the impact of CVE-2010-0502 on iChat Server in Apple Mac OS X Server?
CVE-2010-0502 allows remote attackers to avoid message auditing due to insufficient logging for certain message types.
2
Which versions of Apple Mac OS X Server are affected by CVE-2010-0502?
CVE-2010-0502 affects Apple Mac OS X Server versions from 10.5.0 up to and including 10.6.2.
3
How can I mitigate the effects of CVE-2010-0502?
To mitigate CVE-2010-0502, upgrade your iChat Server to version 10.6.3 or later.
4
What kind of messages are not logged due to CVE-2010-0502?
CVE-2010-0502 affects the logging of certain types of messages during group chat in iChat Server.
5
Is CVE-2010-0502 considered a serious vulnerability?
Yes, CVE-2010-0502 is a serious vulnerability as it compromises message auditing, which is critical for security.