Apple Mac OS X Multiple Security Vulnerabilities
BID:10486
Info
Apple Mac OS X Multiple Security Vulnerabilities
| Bugtraq ID: | 10486 |
| Class: | Unknown |
| CVE: |
CVE-2004-0538 CVE-2004-0539 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | The vendor disclosed these vulnerabilities. |
| Vulnerable: |
Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.2.8 Apple Mac OS X 10.3.4 Apple Mac OS X 10.2.8 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Multiple Security Vulnerabilities
Multiple security vulnerabilities were reported in Mac OS X. A security update has been released to address these issues and provide other enhancements. The following issues were reported:
LaunchServices is reported prone to a vulnerability where the LaunchServices utility automatically registers applications. It is reported that an attacker may exploit this issue to register and run malicious applications.
DiskImageMounter is reported prone to a vulnerability where the disk:// URI handler may be used to mount an anonymous remote file system. This attack can be achieved using the HTTP protocol. A remote attacker may exploit this vulnerability to write to the local disk.
Safari is reported prone to an unspecified vulnerability where the Safari "Show in Finder" button, when invoked, would attempt to execute certain files instead of revealing the files in the finder window. An attacker may potentially exploit this condition to automatically execute files on the file system (including downloaded files). This could lead to privilege escalation or remote compromise.
Some of these issues may already be described in previous BIDs. This BID will be split up into unique BIDs when further analysis of this update is complete.
Multiple security vulnerabilities were reported in Mac OS X. A security update has been released to address these issues and provide other enhancements. The following issues were reported:
LaunchServices is reported prone to a vulnerability where the LaunchServices utility automatically registers applications. It is reported that an attacker may exploit this issue to register and run malicious applications.
DiskImageMounter is reported prone to a vulnerability where the disk:// URI handler may be used to mount an anonymous remote file system. This attack can be achieved using the HTTP protocol. A remote attacker may exploit this vulnerability to write to the local disk.
Safari is reported prone to an unspecified vulnerability where the Safari "Show in Finder" button, when invoked, would attempt to execute certain files instead of revealing the files in the finder window. An attacker may potentially exploit this condition to automatically execute files on the file system (including downloaded files). This could lead to privilege escalation or remote compromise.
Some of these issues may already be described in previous BIDs. This BID will be split up into unique BIDs when further analysis of this update is complete.
Exploit / POC
Apple Mac OS X Multiple Security Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apple Mac OS X Multiple Security Vulnerabilities
Solution:
Apple has released a security advisory (APPLE-SA-2004-06-07) and a security update to address these issues:
Apple Mac OS X 10.2.8
Apple Mac OS X Server 10.2.8
Apple Mac OS X 10.3.4
Apple Mac OS X Server 10.3.4
Solution:
Apple has released a security advisory (APPLE-SA-2004-06-07) and a security update to address these issues:
Apple Mac OS X 10.2.8
-
Apple SecUpd2004-06-07Jag.dmg
http://www.apple.com/support/downloads/securityupdate_2004-06-07_(_10_ 2_8).html
Apple Mac OS X Server 10.2.8
-
Apple SecUpd2004-06-07Jag.dmg
http://www.apple.com/support/downloads/securityupdate_2004-06-07_(_10_ 2_8).html
Apple Mac OS X 10.3.4
-
Apple SecUpd2004-06-07Pan.dmg
http://www.apple.com/support/downloads/securityupdate_2004-06-07_(_10_ 3_4).html
Apple Mac OS X Server 10.3.4
-
Apple SecUpd2004-06-07Pan.dmg
http://www.apple.com/support/downloads/securityupdate_2004-06-07_(_10_ 3_4).html
References
Apple Mac OS X Multiple Security Vulnerabilities
References:
References:
- About Security Update 2004-06-07 (Apple)
- Apple Security Updates (Apple)
- Mac OS X Homepage (Apple)