Darwin Kernel Mach File Parsing Local Integer Overflow Vulnerability

Bugtraq ID:	12314
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 19 2005 12:00AM
Updated:	Jan 19 2005 12:00AM
Credit:	[email protected] is credited with the discovery of this issue.
Vulnerable:	Darwin Kernel 7.1 + Apple Mac OS X 10.3.6 + Apple Mac OS X 10.3.5 + Apple Mac OS X 10.3.4 + Apple Mac OS X 10.3.3 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.3.1 + Apple Mac OS X 10.3 + Apple Mac OS X Server 10.3.6 + Apple Mac OS X Server 10.3.5 + Apple Mac OS X Server 10.3.4 + Apple Mac OS X Server 10.3.3 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3
Not Vulnerable:

Darwin Kernel Mach File Parsing Local Integer Overflow Vulnerability

Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness.

An attacker may leverage this issue to cause the affected computer to crash, denying service to legitimate users. It has been speculated that this issue may also be leverage to escalate privileges, although this is unconfirmed.

Darwin Kernel Mach File Parsing Local Integer Overflow Vulnerability

The following exploit has been made available. When executed it will cause the affected computer to crash.

• /data/vulnerabilities/exploits/fm-nacho.c

Darwin Kernel Mach File Parsing Local Integer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Darwin Kernel Mach File Parsing Local Integer Overflow Vulnerability

References:

• Apple Darwin Home Page (Apple)
  
• Mac OS X Homepage (Apple)
  
• OpenDarwin Home Page (Darwin)
  
• Darwin Kernel Vulnerability ([email protected])