CVE-2010-0509: High severity Apple iOS and macOS vulnerability
Published Mar 30, 2010
·Updated
SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.
Affected Software
26 affected components
Apple iOS and macOS=10.5.8
Apple Mac OS X Server=10.5.2
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.5.8
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.5.5
Apple iOS and macOS=10.5.1
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple iOS and macOS=10.5
Apple Mac OS X Server=10.5.4
Apple iOS and macOS=10.5.2
Apple Mac OS X Server=10.5.7
Apple Mac OS X Server=10.6.1
Apple iOS and macOS<=10.6.2
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.5.7
Apple Mac OS X Server=10.5
Apple Mac OS X Server<=10.6.2
Apple iOS and macOS=10.5.4
Remediation
Patch Available
Event History
Mar 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0509?
CVE-2010-0509 is considered a moderate severity vulnerability due to its potential to allow local privilege escalation.
2
How do I fix CVE-2010-0509?
To mitigate CVE-2010-0509, update your Apple Mac OS X to version 10.6.3 or later.
3
Who is affected by CVE-2010-0509?
Local users of Apple Mac OS X versions prior to 10.6.3 are affected by CVE-2010-0509.
4
What causes CVE-2010-0509?
CVE-2010-0509 is caused by improper handling of wheel group membership during access to user home directories.
5
Can CVE-2010-0509 be exploited remotely?
No, CVE-2010-0509 can only be exploited by local users with access to the affected systems.