Network Access Bypass in Apple OS X Server Firewall Configuration

CVE-2015-1150

Summary

The Firewall component in OS X Server prior to version 4.1 contains a flaw in its configuration files, where an incorrect pathname is utilized. This flaw allows remote attackers to effectively bypass intended network-access restrictions, thereby enabling them to send specific packets that should have been blocked by custom rules. The error in the firewall's configuration can have serious implications for system integrity and security.

References