VULNERABILITY INTELLIGENCE

CVE-2009-2818

CVSS score5 NONE
EPSS probability1.88%
CISA KEVNot currently listed
Published2009-11-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack).

Weakness classification

  • nvd@nist.gov: CWE-264

Primary references