VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2002· Updated Jun 16, 2026

CVE-2002-0676

CVE-2002-0676

Description

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Apple Inc./Mac OS X6 versions
    cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*
  • Apple Inc./SoftwareUpdatellm-create
    Range: = bundled with MacOS 10.1.x
  • Apple Inc./macOSllm-fuzzy
    Range: = 10.1.x

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.