CVE-2008-3634
Estado: ModificadaBaja (2.6)—
Aplicación Itunes anterior a la v8 sobre Mac OS X 10.4.11, cuando iTunes Sharing se encuentra habilitado pero bloqueado por el cortafuegos del sistema, muestra información falsa (engañosa) sobre la seguridad del cortafuegos. Esto podría ser aprovechado por atacantes remotos. El administrador no obviaría esta cuestión si se le diera mejor información al respecto.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
- Puntuación base: 2.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.64%
- Percentil entre todas las CVEs puntuadas: 76
- Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-3634",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-11T01:13:09.977",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1020840",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/31090",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1020840",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/31090",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information."
},
{
"lang": "es",
"value": "Aplicación Itunes anterior a la v8 sobre Mac OS X 10.4.11, cuando iTunes Sharing se encuentra habilitado pero bloqueado por el cortafuegos del sistema, muestra información falsa (engañosa) sobre la seguridad del cortafuegos. Esto podría ser aprovechado por atacantes remotos. El administrador no obviaría esta cuestión si se le diera mejor información al respecto."
}
],
"lastModified": "2026-06-16T22:56:11.617",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6EE39585-CF3B-4493-96D8-B394544C7643"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C7FAB2A-936D-43A5-9F2F-D2EE8B7BA3CF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "075059D3-9F2B-4746-9D85-597CAA0D476E",
"versionEndIncluding": "7.7.1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8659A87-1197-4C3B-A076-90FE3A453205"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E15C097-98DE-4217-8814-95B54CE418F5"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC4179C0-CA2C-42D7-AD72-A19668662A62"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1EB1098-87E1-45DC-BD44-2B374BAA758C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49DD3B1C-1743-434B-B67F-A3C1B350059A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F995CF65-E3DD-4C54-B3F5-417C6F75D930"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44964DEC-DC35-4DCE-B28D-687348758163"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F1A117-8508-4274-99EA-D58F54EBBA6A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4490461A-84C7-42C3-A61B-4E6EF5980B47"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42486BD7-4371-46EE-B670-CED685872E6B"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B00EDB73-7A1B-4847-903A-88729269E1AD"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07040FC1-6BFE-4E8F-A089-1166404BE33B"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6573035-D208-4C4C-98A4-A7BA26C6AB15"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCD0C29E-FB9F-41DE-968F-46DD0EA55003"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}