CVE-2004-0489: Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remo...

Security readout for executives and security teams

This old Mac OS X Safari issue could let a malicious web link abuse the SSH URL handler. The source bundle says attackers could execute code through SSH options or create port forwarding. The practical concern is legacy Mac OS X 10.3.3 or earlier systems still used for browsing or opening links. Exposure is likely limited to very old Mac OS X 10.3.3 and earlier systems where Safari handles ssh: URIs. Modern environments are unlikely to be affected unless legacy Macs remain in operational, kiosk, lab, or archival use. Treat as high priority only if legacy Mac OS X systems remain in use. For current Apple fleets, priority is mainly asset-discovery and decommissioning assurance, because the evidence points to an obsolete platform and lacks active exploitation confirmation. Mitigation focus: Identify and retire Mac OS X 10.3.3 or earlier systems where possible.; Check Apple or vendor archival guidance for an official patch or workaround.; Avoid using affected Safari builds to browse untrusted sites or open untrusted links..

Prepared

Jun 30, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.