CVE-2008-3634

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-09-11 · updated 2026-06-16
Weakness: CWE-200

Description

Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.

Affected products

Apple iTunes for Windows: through 7.7.1; 1.0, 1.1, 1.1.1, 1.1.2, 2.0, 2.0.1 (+37)

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html
http://securitytracker.com/id?1020840
http://www.securityfocus.com/bid/31090
http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html
http://securitytracker.com/id?1020840
http://www.securityfocus.com/bid/31090

Get alerted when CVE-2008-3634 or the next vulnerability affects your stack