CVEvulnerability
CVE-2013-5229
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-254
Description
The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.
Affected configurations
• apple mac os x (<= 10.8.5)
• apple apple remote desktop (<= 3.6.2)
Related
Weakness · not in database (1)
References
- http://jvn.jp/en/jp/JVN56210048/741993/index.html Vendor Advisory
- http://jvn.jp/en/jp/JVN56210048/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177 Vendor Advisory
- http://www.securitytracker.com/id/1034187 www.securitytracker.com
- http://jvn.jp/en/jp/JVN56210048/741993/index.html Vendor Advisory
- http://jvn.jp/en/jp/JVN56210048/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177 Vendor Advisory
- http://www.securitytracker.com/id/1034187 www.securitytracker.com