NetSight
high7.8

CVE-2010-0500

Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (…

Impact

Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue."

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3
AppleMac Os X Server
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3

Weakness classification

References