Retired: Apple Mac OS X Multiple Security Vulnerabilities

Bugtraq ID:	18686
Class:	Unknown
CVE:	CVE-2006-1468 CVE-2006-1469 CVE-2006-1470 CVE-2006-1471
Remote:	Yes
Local:	Yes
Published:	Jun 27 2006 12:00AM
Updated:	Jun 30 2006 03:44PM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4
Not Vulnerable:	Apple Mac OS X Server 10.4.7 Apple Mac OS X 10.4.7

Retired: Apple Mac OS X Multiple Security Vulnerabilities

Mac OS X is prone to multiple security vulnerabilities:

- Information-disclosure issue
- Buffer-overflow and potential denial-of-service issues
- Format-string vulnerability
- Denial-of-service issue in Open Directory

Apple has released Mac OS X version 10.4.7 to address these issues.

This BID has been seperated into the following BIDs and is therefore being retired:
BID 18733 (Apple Mac OS X AFP Information Disclosure Vulnerability)
BID 18728 (Apple Mac OS X OpenLDAP Denial Of Service Vulnerability)
BID 18724 (Apple Mac OS X LaunchD Local Format String Vulnerability)
BID 18731 (Apple Mac OS X ImageIO TIFF Images Remote Buffer Overflow Vulnerability).

Retired: Apple Mac OS X Multiple Security Vulnerabilities

Exploit code has been released for the launchd format string issue.

Some of these issues do not require exploits.

• /data/vulnerabilities/exploits/FailureToLaunch.pl

Retired: Apple Mac OS X Multiple Security Vulnerabilities

Solution:
The vendor has released OS X version 10.4.7 to address these issues.


Apple Mac OS X Server 10.4

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.1

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.2

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.3

• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.4

• Apple MacOSXUpdCombo10.4.7Intel.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.5

• Apple MacOSXUpdCombo10.4.7Intel.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.6

• Apple MacOSXServerUpdate10.4.7.dmg
  http://www.apple.com/support/downloads/


• Apple MacOSXSrvrUpdCombo10.4.7.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.6

• Apple MacOSXUpd10.4.7Intel.dmg
  for Intel
  http://www.apple.com/support/downloads/


• Apple MacOSXUpd10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/


• Apple MacOSXUpdCombo10.4.7PPC.dmg
  for PowerPC
  http://www.apple.com/support/downloads/

Retired: Apple Mac OS X Multiple Security Vulnerabilities

References:

• Apple Downloads (Apple)
  
• Apple Security Updates (Apple)
  
• Mac OS X Homepage (Apple)