Apple Mac OS X Catalog and Distribution File Arbitrary Command Execution Weakness

Bugtraq ID:	26908
Class:	Access Validation Error
CVE:	CVE-2007-5863
Remote:	Yes
Local:	No
Published:	Dec 17 2007 12:00AM
Updated:	Dec 18 2007 11:31PM
Credit:	Moritz Jodeit is credited with the discovery of this vulnerability.
Vulnerable:	Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Catalog and Distribution File Arbitrary Command Execution Weakness

Apple Mac OS X is prone to a weakness that may allow attackers to execute arbitrary commands.

Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow an attacker to execute arbitrary commands on affected computers, provided that the 'allow-external-scripts' option is enabled.

Apple Mac OS X Catalog and Distribution File Arbitrary Command Execution Weakness

The following Metasploit framework module is available:

• /data/vulnerabilities/exploits/26908.rb

Apple Mac OS X Catalog and Distribution File Arbitrary Command Execution Weakness

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Apple Mac OS X Server 10.5.1

• Apple Security Update 2007-009 (10.5.1)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16527&cat= 1&platform=osx&method=sa/SecUpd2007-009.dmg

Apple Mac OS X 10.5.1

• Apple Security Update 2007-009 (10.5.1)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16527&cat= 1&platform=osx&method=sa/SecUpd2007-009.dmg

Apple Mac OS X Catalog and Distribution File Arbitrary Command Execution Weakness

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• Apple OS X Software Update Remote Command Execution ([email protected])