CVE-2011-3462

Published: Feb 2, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.

Affected (6)

Products: Apple: Mac Os X, Mac Os X Server

Apple

2 products

Mac Os X

Mac Os X Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.7.2
Apple Mac Os X	Version 10.7.0
Apple Mac Os X	Version 10.7.1
Apple Mac Os X Server	Up to 10.7.2
Apple Mac Os X Server	Version 10.7.0
Apple Mac Os X Server	Version 10.7.1

References (4)

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT5130

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT5130

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.