CVE-2008-3634
Status: ModifiedLow (2.6)—
Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.
CVSS
- Version: 2.0
- Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
- Base score: 2.6
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.64%
- Percentile among all scored CVEs: 76
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-200
References
Raw JSON (NVD)
Show
{
"id": "CVE-2008-3634",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-11T01:13:09.977",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1020840",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/31090",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1020840",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/31090",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information."
},
{
"lang": "es",
"value": "Aplicación Itunes anterior a la v8 sobre Mac OS X 10.4.11, cuando iTunes Sharing se encuentra habilitado pero bloqueado por el cortafuegos del sistema, muestra información falsa (engañosa) sobre la seguridad del cortafuegos. Esto podría ser aprovechado por atacantes remotos. El administrador no obviaría esta cuestión si se le diera mejor información al respecto."
}
],
"lastModified": "2026-06-16T22:56:11.617",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6EE39585-CF3B-4493-96D8-B394544C7643"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C7FAB2A-936D-43A5-9F2F-D2EE8B7BA3CF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "075059D3-9F2B-4746-9D85-597CAA0D476E",
"versionEndIncluding": "7.7.1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8659A87-1197-4C3B-A076-90FE3A453205"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E15C097-98DE-4217-8814-95B54CE418F5"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC4179C0-CA2C-42D7-AD72-A19668662A62"
},
{
"criteria": "cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1EB1098-87E1-45DC-BD44-2B374BAA758C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49DD3B1C-1743-434B-B67F-A3C1B350059A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F995CF65-E3DD-4C54-B3F5-417C6F75D930"
},
{
"criteria": "cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44964DEC-DC35-4DCE-B28D-687348758163"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F1A117-8508-4274-99EA-D58F54EBBA6A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4490461A-84C7-42C3-A61B-4E6EF5980B47"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42486BD7-4371-46EE-B670-CED685872E6B"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B00EDB73-7A1B-4847-903A-88729269E1AD"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07040FC1-6BFE-4E8F-A089-1166404BE33B"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6573035-D208-4C4C-98A4-A7BA26C6AB15"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCD0C29E-FB9F-41DE-968F-46DD0EA55003"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}