NetSight
medium4.3

CVE-2011-0190

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logi…

Impact

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

Affected products

VendorProductAffected versions
AppleInstaller
All versions
AppleMac Os X
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4, 10.6.5
AppleMac Os X Server
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4, 10.6.5

Weakness classification

References