Sign-up

ID

VAR-201003-0138


CVE

CVE-2010-0058


TITLE

Apple Mac OS X of ClamAV Vulnerability in introducing viruses into systems

Trust: 0.8

sources: JVNDB: JVNDB-2010-001242

DESCRIPTION

freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into the system. Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection. This issue affects Mac OS X 10.5.8 and Mac OS X Server 10.5.8. It does not work because the wrong launchd.plist ProgramArguments key is set, allowing an attacker to bypass antivirus checks

Trust: 1.98

sources: NVD: CVE-2010-0058 // JVNDB: JVNDB-2010-001242 // BID: 39170 // VULHUB: VHN-42663

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:eqversion:10.5.8

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.5.8

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:v10.5.8

Trust: 0.8

vendor:applemodel:mac os x serverscope:eqversion:v10.5.8

Trust: 0.8

vendor:applemodel:mac os serverscope:eqversion:x10.5.8

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.7

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.6

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.5

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.4

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.3

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.2

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5.1

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.5

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.7

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.6

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.5

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.3

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5.1

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.5

Trust: 0.3

sources: BID: 39170 // JVNDB: JVNDB-2010-001242 // CNNVD: CNNVD-201003-453 // NVD: CVE-2010-0058

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-0058
value: MEDIUM

Trust: 1.0

NVD: CVE-2010-0058
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201003-453
value: MEDIUM

Trust: 0.6

VULHUB: VHN-42663
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-0058
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-42663
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-42663 // JVNDB: JVNDB-2010-001242 // CNNVD: CNNVD-201003-453 // NVD: CVE-2010-0058

PROBLEMTYPE DATA

problemtype:CWE-16

Trust: 1.9

sources: VULHUB: VHN-42663 // JVNDB: JVNDB-2010-001242 // NVD: CVE-2010-0058

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201003-453

TYPE

Configuration Error

Trust: 0.9

sources: BID: 39170 // CNNVD: CNNVD-201003-453

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-001242

PATCH
title:HT4077url:http://support.apple.com/kb/HT4077
Trust: 0.8
title:HT4077url:http://support.apple.com/kb/HT4077?viewlocale=ja_JP
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-001242

EXTERNAL IDS
db:NVDid:CVE-2010-0058
Trust: 2.8
db:JVNDBid:JVNDB-2010-001242
Trust: 0.8
db:CNNVDid:CNNVD-201003-453
Trust: 0.7
db:NSFOCUSid:14715
Trust: 0.6
db:APPLEid:APPLE-SA-2010-03-29-1
Trust: 0.6
db:BIDid:39170
Trust: 0.4
db:VULHUBid:VHN-42663
Trust: 0.1
sources:
            
            
            VULHUB: VHN-42663 // 
            
            
            
            BID: 39170 // 
            
            
            
            JVNDB: JVNDB-2010-001242 // 
            
            
            
            CNNVD: CNNVD-201003-453 // 
            
            
            
            NVD: CVE-2010-0058

REFERENCES
url:http://lists.apple.com/archives/security-announce/2010//mar/msg00001.html
Trust: 1.7
url:http://support.apple.com/kb/ht4077
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0058
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0058
Trust: 0.8
url:http://www.nsfocus.net/vulndb/14715
Trust: 0.6
url:http://www.apple.com/macosx/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-42663 // 
            
            
            
            BID: 39170 // 
            
            
            
            JVNDB: JVNDB-2010-001242 // 
            
            
            
            CNNVD: CNNVD-201003-453 // 
            
            
            
            NVD: CVE-2010-0058

CREDITS
Michael KisorDamian Put pucik@cc-team.org
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201003-453

SOURCES
db:VULHUBid:VHN-42663
db:BIDid:39170
db:JVNDBid:JVNDB-2010-001242
db:CNNVDid:CNNVD-201003-453
db:NVDid:CVE-2010-0058

LAST UPDATE DATE
2025-04-11T21:31:30.290000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-42663date:2010-03-31T00:00:00
db:BIDid:39170date:2010-03-29T00:00:00
db:JVNDBid:JVNDB-2010-001242date:2010-04-13T00:00:00
db:CNNVDid:CNNVD-201003-453date:2010-03-31T00:00:00
db:NVDid:CVE-2010-0058date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-42663date:2010-03-30T00:00:00
db:BIDid:39170date:2010-03-29T00:00:00
db:JVNDBid:JVNDB-2010-001242date:2010-04-13T00:00:00
db:CNNVDid:CNNVD-201003-453date:2010-03-30T00:00:00
db:NVDid:CVE-2010-0058date:2010-03-30T17:30:00.517