Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
BID:16654
Info
Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
| Bugtraq ID: | 16654 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-0382 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 14 2006 12:00AM |
| Updated: | Feb 15 2006 05:17PM |
| Credit: | Discovery of this issue is credited to David Goldsmith of Matasano. |
| Vulnerable: |
Cosmicperl Directory Pro 10.0.3 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0 |
| Not Vulnerable: |
Apple Mac OS X Server 10.4.5 Apple Mac OS X 10.4.5 |
Discussion
Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
Apple Mac OS X is susceptible to a local denial-of-service vulnerability. This issue is do to the kernel's failure to properly handle the execution of an undocumented system call.
This issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users.
Apple Mac OS X is susceptible to a local denial-of-service vulnerability. This issue is do to the kernel's failure to properly handle the execution of an undocumented system call.
This issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users.
Exploit / POC
Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
Solution:
Apple has released security advisory APPLE-SA-2006-02-14 along with fixes dealing with this issue. Please see the referenced advisory for more information.
Apple Mac OS X 10.4
Apple Mac OS X 10.4.1
Apple Mac OS X 10.4.2
Apple Mac OS X 10.4.3
Apple Mac OS X Server 10.4.4
Apple Mac OS X 10.4.4
Solution:
Apple has released security advisory APPLE-SA-2006-02-14 along with fixes dealing with this issue. Please see the referenced advisory for more information.
Apple Mac OS X 10.4
-
Apple Mac OS X Update 10.4.5 Combo
http://www.apple.com/support/downloads/macosxupdate1045combo.html
Apple Mac OS X 10.4.1
-
Apple Mac OS X Update 10.4.5 Combo
http://www.apple.com/support/downloads/macosxupdate1045combo.html
Apple Mac OS X 10.4.2
-
Apple Mac OS X Update 10.4.5 Combo
http://www.apple.com/support/downloads/macosxupdate1045combo.html
Apple Mac OS X 10.4.3
-
Apple Mac OS X Update 10.4.5 Combo
http://www.apple.com/support/downloads/macosxupdate1045combo.html
Apple Mac OS X Server 10.4.4
-
Apple Mac OS X Server 10.4.5
http://www.apple.com/support/downloads/macosxserver1045.html
Apple Mac OS X 10.4.4
-
Apple Mac OS X Update 10.4.5
http://www.apple.com/support/downloads/macosxupdate1045.html -
Apple Mac OS X Update 10.4.5 for Intel
Intel
http://www.apple.com/support/downloads/macosxupdate1045forintel.html
References
Apple Mac OS X Undocumented System Call Local Denial Of Service Vulnerability
References:
References:
- Mac OS X Homepage (Apple)