CVE-2009-2829: Apple Mac OS X Server

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.

Affected products

• Apple Mac OS X Server: version 10.5.8 only

Published 2009-11-10. Last modified 2026-06-16.