CVE-2009-2801: Apple Mac OS X

Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days.

The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to bypass intended access restrictions via packet data, related to a "timing issue."

Affected products

  • Apple Mac OS X: version 10.5.8 only
  • Apple Mac OS X Server: version 10.5.8 only

Published 2010-03-30. Last modified 2026-06-16.