Apple Mac OS X mDNSResponder Variant Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	24924
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2007 12:00AM
Updated:	Jul 19 2007 06:16PM
Credit:	InfoSec Sellout discovered this vulnerability.
Vulnerable:	Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4
Not Vulnerable:

Apple Mac OS X mDNSResponder Variant Unspecified Remote Code Execution Vulnerability

Apple Mac OS X is reportedly prone to an unspecified remote code-execution vulnerability.

Successfully exploiting this issue allows remote attackers to execute arbitrary machine code with superuser privileges, facilitating the complete compromise of affected computers. Failed exploit attempts likely result in a denial-of-service condition.

NOTE: This has not been confirmed by any other researchers or the vendor.

Apple Mac OS X mDNSResponder Variant Unspecified Remote Code Execution Vulnerability

The discoverer has created a proof-of-concept exploit, but will not release it to the public.

Apple Mac OS X mDNSResponder Variant Unspecified Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apple Mac OS X mDNSResponder Variant Unspecified Remote Code Execution Vulnerability

References:

• Worm Claimed For Apple OS X (kdawson)
  
• Mac OS X Homepage (Apple)
  
• Oh Look. An Apple WORM. (Information Security Sell Out)