Apple MacOS X URI Handler Remote Code Execution Variant Vulnerabilities

Bugtraq ID:	10401
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 22 2004 12:00AM
Updated:	May 22 2004 12:00AM
Credit:	Discovered by Jens Jakob.
Vulnerable:	Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2
Not Vulnerable:

Apple MacOS X URI Handler Remote Code Execution Variant Vulnerabilities

It has been reported that there are variants of the issue described as BID 10356 that remain unfixed, allowing remote code execution on vulnerable OS X systems.

Apple MacOS X URI Handler Remote Code Execution Variant Vulnerabilities

It is reported that an exploit relying on FTP and also one relying on SSH are in the wild.

Apple MacOS X URI Handler Remote Code Execution Variant Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple MacOS X URI Handler Remote Code Execution Variant Vulnerabilities

References:

• Vendor Home Page (Apple)