Vulnerability Details : CVE-2008-3617
Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.
Products affected by CVE-2008-3617
- cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*
Threat overview for CVE-2008-3617
Top countries where our scanners detected CVE-2008-3617
Top open port discovered on systems with this issue
548
IPs affected by CVE-2008-3617 31
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2008-3617!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2008-3617
0.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 52 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-3617
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2008-3617
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-3617
-
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
Apple - Lists.apple.comPatch
-
http://www.securityfocus.com/bid/31189
Patch
-
http://www.us-cert.gov/cas/techalerts/TA08-260A.html
Page Not Found | CISAUS Government Resource
-
http://www.vupen.com/english/advisories/2008/2584
Site en construction
-
http://securitytracker.com/id?1020882
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/45174
Jump to