CVE-2014-4446: Low severity Apple OS X Server vulnerability
Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4446?
CVE-2014-4446 is considered a medium severity vulnerability due to its ability to allow unauthorized access to services.
How do I fix CVE-2014-4446?
To fix CVE-2014-4446, restart the Apple OS X Server mail service after making any changes to SACL settings.
What versions of Apple OS X Server are affected by CVE-2014-4446?
CVE-2014-4446 affects Apple OS X Server versions prior to 4.0, specifically up to and including 3.1.2.
Who can exploit CVE-2014-4446?
CVE-2014-4446 can be exploited by remote authenticated users who take advantage of SACL changes not being enforced until a service restart.
What is the impact of CVE-2014-4446?
The impact of CVE-2014-4446 allows remote authenticated users to bypass intended access restrictions in certain conditions.