Description
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
References
- 1006796 vdb-entry
- VU#869548 third-party-advisory
- 8798 third-party-advisory
- macos-ipsec-acl-bypass(12027) vdb-entry
- 7628 vdb-entry
- http://docs.info.apple.com/article.html?artnum=61798