BID:21291

Apple Mac OS X Mach-O Binary Loading Integer Overflow Vulnerability

Info

Apple Mac OS X Mach-O Binary Loading Integer Overflow Vulnerability

Bugtraq ID:	21291
Class:	Boundary Condition Error
CVE:	CVE-2006-6129
Remote:	No
Local:	Yes
Published:	Nov 26 2006 12:00AM
Updated:	Mar 15 2007 03:34AM
Credit:	LMH <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4

Not Vulnerable:

Discussion

Apple Mac OS X Mach-O Binary Loading Integer Overflow Vulnerability

Apple Mac OS X is prone to a local integer-overflow vulnerability. This issue occurs when the operating system fails to handle specially crafted binaries.

A successful exploit would allow a local attacker to execute arbitrary code with kernel-level privileges, leading to the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Exploit / POC

Apple Mac OS X Mach-O Binary Loading Integer Overflow Vulnerability

The following proof of concept demonstrates this issue.

/data/vulnerabilities/exploits/MOKB-26-11-2006.bz2

Solution / Fix

Apple Mac OS X Mach-O Binary Loading Integer Overflow Vulnerability

Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for further information.

Apple Mac OS X Server 10.4