SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote malicious users to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple mac os x 10.1.1 |
||
apple mac os x 10.1.2 |
||
apple mac os x 10.1.3 |
||
apple mac os x 10.1.4 |
||
apple mac os x 10.1 |
||
apple mac os x 10.1.5 |