CVE-2011-3215

Published Oct 14, 2011 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-3179 The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 11:29 PM
Reserved
Aug 19, 2011, 12:00 AM
Status
Modified
Published
Oct 14, 2011, 10:55 AM
Modified
Jun 16, 2026, 11:32 PM