CVE-2002-0676

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by…

published April 2, 2003

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04273 · 91.0th percentile
Published
2003-04-02T05:00Z
EPSS history
Timeline
  • 02 APR 05:00Z
    SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by…
    cvelistv5