CVE-2004-2687: apple xcode Configuration

Vulnerability summary

CVE-2004-2687 is a high (CVSS 9.3) Configuration vulnerability in apple xcode. EPSS estimates a 88.20% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 23-09-2007
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.

• CWE-16ConfigurationWeaknesses in this category are typically introduced during the configuration of the software.