Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Mac OS X ‘FireWire DMA’ 权限许可和访问控制漏洞
Vulnerability Description
Apple Mac OS X是美国苹果(Apple)公司为Mac计算机所开发的一套专用操作系统。 Apple Mac OS X 10.7.2之前版本中存在权限许可和访问控制漏洞。由于kernel在没有登录时不能准确阻止FireWire DMA,本地攻击者可通过制作(1)登录窗口,(2)引导,或者(3)关机状态中的DMA请求绕过预期的访问限制发现密码。
CVSS Information
N/A
Vulnerability Type
N/A