CVE-2002-0676
Last modified
CVE-2002-0676 is a vulnerability of currently unknown severity. SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.. EPSS estimates a 4.27% chance of exploitation in the next 30 days.
Description
SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.1 |
| Apple | Mac Os X | 10.1.1 |
| Apple | Mac Os X | 10.1.2 |
| Apple | Mac Os X | 10.1.3 |
| Apple | Mac Os X | 10.1.4 |
| Apple | Mac Os X | 10.1.5 |
References
- http://www.cunap.com/~hardingr/projects/osx/exploit.htmlVendor Advisory
- http://www.cunap.com/~hardingr/projects/osx/exploit.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-0676?
How severe is CVE-2002-0676?
How do I fix CVE-2002-0676?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-0670The web interface for Pingtel xpressa SIP-based voice-over-I…
- CVE-2002-0671Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …9.8
- CVE-2002-0672Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
- CVE-2002-0673The enrollment process for Pingtel xpressa SIP-based voice-o…
- CVE-2002-0674Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
- CVE-2002-0675Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
- CVE-2002-0677CDE ToolTalk database server (ttdbserver) allows remote atta…
- CVE-2002-0678CDE ToolTalk database server (ttdbserver) allows local users…
- CVE-2002-0679Buffer overflow in Common Desktop Environment (CDE) ToolTalk…
- CVE-2002-0680Directory traversal vulnerability in GoAhead Web Server 2.1 …
- CVE-2002-0681Cross-site scripting vulnerability in GoAhead Web Server 2.1…
- CVE-2002-0682Cross-site scripting vulnerability in Apache Tomcat 4.0.3 al…
Are you affected by CVE-2002-0676?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST