Apple Mac OS X Multiple Security Vulnerabilities

Bugtraq ID:	19289
Class:	Unknown
CVE:	CVE-2006-1472 CVE-2006-1473 CVE-2006-3495 CVE-2006-3496 CVE-2006-3497 CVE-2006-3498 CVE-2006-3499 CVE-2006-3500 CVE-2006-0392 CVE-2006-3501 CVE-2006-3502 CVE-2006-3503 CVE-2006-3504 CVE-2006-3505 CVE-2006-0393
Remote:	Yes
Local:	No
Published:	Aug 01 2006 12:00AM
Updated:	Nov 15 2007 12:35AM
Credit:	The vendor credits Dino Dai Zovi of Matasano Security, Tom Ferris of Security-Protocols.com, Neil Archibald of Suresec LTD, Rob Middleton of the Centenary Institute, Gael Delalleau and iDEFENSE, and Jesse Ruderman of Mozilla Corporation.
Vulnerable:	Cosmicperl Directory Pro 10.0.3 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0 Apple iPod Touch 1.1.1 Apple iPod Touch 1.1 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 1
Not Vulnerable:

Apple Mac OS X Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple security vulnerabilities.

These issue affect Mac OS X and various applications including AFP Server, Bluetooth, Bom, DHCP, Image RAW, ImageIO, Launch Services, OpenSSH, and WebKit. A remote attacker may exploit these issues to execute arbitrary code, trigger denial-of-service conditions, escalate privileges, and disclose potentially sensitive information.

Apple Mac OS X 10.4.7 and prior are reported vulnerable to these issues.

Apple Mac OS X Multiple Security Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Some of these issues may not require specific exploit code.

• /data/vulnerabilities/exploits/osx_fetchmail_priv_esc.txt
• /data/vulnerabilities/exploits/osx_fetchmail_priv_esc_ppc.txt
• /data/vulnerabilities/exploits/osx_fetchmail_priv_esc_x86.txt

Apple Mac OS X Multiple Security Vulnerabilities

Solution:
The vendor has released a security advisory to address the majority of these issues.

Apple has released advisory APPLE-SA-2006-08-09 to address the following issues for computers running Mac OS X 10.4.7 build 8K1079, and Mac OS X Server 10.4.7 build 8K1079:
- CVE-2006-0393
- CVE-2006-3459
- CVE-2006-3461
- CVE-2006-3462
- CVE-2006-3465
Please see the referenced advisory for further information.


Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2006-004Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11231&cat= 1&platform=osx&method=sa/SecUpdSrvr2006-004Pan.dmg

Apple Mac OS X 10.3.9

• Apple SecUpd2006-004Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11230&cat= 1&platform=osx&method=sa/SecUpd2006-004Pan.dmg

Apple Mac OS X 10.4.7

• Apple SecUpd2006-004Intel.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11232&cat= 1&platform=osx&method=sa/SecUpd2006-004Intel.dmg

Apple Mac OS X Multiple Security Vulnerabilities

References:

• Apple Security Updates (Apple)
  
• Mac OS X Homepage (Apple)
  
• VU#172244 - Apple Mac OS X ImageIO vulnerable to integer overflow via specially (US-CERT)
  
• VU#514740 - Apple Mac OS X Bom vulnerable to memory corruption via specially cra (US-CERT)
  
• VU#566132 - Apple Mac OS X WebKit may allow code execution when visiting a malic (US-CERT)
  
• VU#605908 - Apple Mac OS X ImageIO vulnerable to integer overflow via specially (US-CERT)
  
• VU#651844 - Apple Mac OS X ImageIO contains undetected memory failure in GIF ima (US-CERT)
  
• VU#776628 - Apple Mac OS X bootpd vulnerable to stack-based buffer overflow (US-CERT)
  
• Vulnerability Note VU#708340 - Apple Mac OS X AFP server may disclose file and f (US-CERT)