CVEvulnerability

CVE-2011-0190

4.3 MEDIUM Published 2011-03-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-03-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

Affected configurations

• apple installer • apple mac os x 10.6.0 • apple mac os x 10.6.1 • apple mac os x 10.6.2 • apple mac os x 10.6.3 • apple mac os x 10.6.4 • apple mac os x 10.6.5 • apple mac os x 10.6.6 • apple mac os x server 10.6.0 • apple mac os x server 10.6.1 • apple mac os x server 10.6.2 • apple mac os x server 10.6.3 • apple mac os x server 10.6.4 • apple mac os x server 10.6.5 • apple mac os x server 10.6.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References