Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
BID:13225
Info
Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
| Bugtraq ID: | 13225 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-0971 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 15 2005 12:00AM |
| Updated: | Jul 12 2009 02:06PM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0 |
| Not Vulnerable: |
Apple Mac OS X Server 10.3.9 Apple Mac OS X 10.3.9 |
Discussion
Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
A kernel stack overflow that presents itself in the 'semop()' system call exists in the Apple Mac OS X kernel. This is due to a failure of the affected function to properly handle certain user-supplied arguments.
Exploitation of this issue will facilitate code execution with kernel level (ring 0) privileges.
It should be noted that this issue was previously reported in BID 13203 (Apple Mac OS X Kernel Multiple Local Privilege Escalation And Denial Of Service Vulnerabilities); it has been assigned its own BID.
A kernel stack overflow that presents itself in the 'semop()' system call exists in the Apple Mac OS X kernel. This is due to a failure of the affected function to properly handle certain user-supplied arguments.
Exploitation of this issue will facilitate code execution with kernel level (ring 0) privileges.
It should be noted that this issue was previously reported in BID 13203 (Apple Mac OS X Kernel Multiple Local Privilege Escalation And Denial Of Service Vulnerabilities); it has been assigned its own BID.
Exploit / POC
Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
Solution:
Apple has released security advisory APPLE-SA-2005-04-15 along with fixes dealing with this and other issues. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.3
Apple Mac OS X 10.3
Apple Mac OS X Server 10.3.1
Apple Mac OS X 10.3.1
Apple Mac OS X 10.3.2
Apple Mac OS X Server 10.3.2
Apple Mac OS X 10.3.3
Apple Mac OS X Server 10.3.3
Apple Mac OS X 10.3.4
Apple Mac OS X Server 10.3.4
Apple Mac OS X Server 10.3.5
Apple Mac OS X 10.3.5
Apple Mac OS X Server 10.3.6
Apple Mac OS X 10.3.6
Apple Mac OS X Server 10.3.7
Apple Mac OS X 10.3.7
Apple Mac OS X 10.3.8
Apple Mac OS X Server 10.3.8
Solution:
Apple has released security advisory APPLE-SA-2005-04-15 along with fixes dealing with this and other issues. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.3
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.1
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.1
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X 10.3.2
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.2
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.3
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.3
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.4
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.4
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X Server 10.3.5
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.5
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.6
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.6
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.7
-
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
Apple Mac OS X 10.3.7
-
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X 10.3.8
-
Apple MacOSXUpdate10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05639&plat form=osx&method=sa/MacOSXUpdate10.3.9.dmg -
Apple MacOSXUpdateCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05640&plat form=osx&method=sa/MacOSXUpdateCombo10.3.9.dmg
Apple Mac OS X Server 10.3.8
-
Apple MacOSXServerUpdate10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05641&plat form=osx&method=sa/MacOSXServerUpdate10.3.9.dmg -
Apple MacOSXSrvrUpdCombo10.3.9.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05642&plat form=osx&method=sa/MacOSXSrvrUpdCombo10.3.9.dmg
References
Apple Mac OS X Kernel Semop Local Stack-Based Buffer Overflow Vulnerability
References:
References:
- Mac OS X Homepage (Apple)