Vulnerability in Apple Mac OS X Server

CVE-2009-2829

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.

EPSS: 0.023 (81.9th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x_server — versions 10.5.8
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)