CVE-2010-0502

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
http://support.apple.com/kb/HT4077Patch, Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
http://support.apple.com/kb/HT4077Patch, Vendor Advisory

Timeline

Published: Mar 30, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-05036.5Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or CVE-2010-05047.5Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary cod CVE-2010-05056.8Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of CVE-2010-05066.8Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (applic CVE-2010-05076.8Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service CVE-2010-050810.0Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact CVE-2010-05097.2SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group mem CVE-2010-05109.0Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticate CVE-2010-05115.0Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is o CVE-2010-05129.3The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login CVE-2010-05136.8Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a de CVE-2010-05146.8Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial