Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
BID:27736
Info
Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
| Bugtraq ID: | 27736 |
| Class: | Unknown |
| CVE: |
CVE-2008-0037 CVE-2008-0038 CVE-2008-0039 CVE-2008-0040 CVE-2008-0041 CVE-2008-0042 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 11 2008 12:00AM |
| Updated: | Feb 13 2008 12:46AM |
| Credit: | Steven Fisher of Discovery Software Ltd, Oleg Drokin of Sun Microsystems, Jesse Pearson, Olli Leppanen, Brian Mastenbrook and the vendor reported these issues. |
| Vulnerable: |
Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Apple Mac OS X Server 10.5.2 Apple Mac OS X 10.5.2 |
Discussion
Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
Apple Mac OS X is prone to multiple security vulnerabilities.
These issues affect Mac OS X and various applications, including Launch Services, Mail, NFS, Parental Controls, and Terminal.
Attackers may exploit these issues to execute arbitrary code, trigger denial-of-service conditions, escalate privileges, and potentially compromise vulnerable computers.
Apple Mac OS X 10.5.1 and prior versions are vulnerable to these issues.
Apple Mac OS X is prone to multiple security vulnerabilities.
These issues affect Mac OS X and various applications, including Launch Services, Mail, NFS, Parental Controls, and Terminal.
Attackers may exploit these issues to execute arbitrary code, trigger denial-of-service conditions, escalate privileges, and potentially compromise vulnerable computers.
Apple Mac OS X 10.5.1 and prior versions are vulnerable to these issues.
Exploit / POC
Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
To exploit some of these issues, an attacker must entice a victim into visiting a malicious webpage or opening a malicious file. For other issues, the attacker must send malformed network packets. Local access is also required for some of these vulnerabilities.
To exploit some of these issues, an attacker must entice a victim into visiting a malicious webpage or opening a malicious file. For other issues, the attacker must send malformed network packets. Local access is also required for some of these vulnerabilities.
Solution / Fix
Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
Solution:
A vendor advisory is available to address these issues. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.5.1
Apple Mac OS X 10.5.1
Solution:
A vendor advisory is available to address these issues. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.5.1
-
Apple SecUpd2008-001PPC.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=17381&cat= 1&platform=osx&method=sa/SecUpd2008-001PPC.dmg -
Apple SecUpd2008-001Univ.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=17382&cat= 57&platform=osx&method=sa/SecUpd2008-001Univ.dmg
Apple Mac OS X 10.5.1
References
Apple Mac OS X v10.5.2 2008-001 Multiple Security Vulnerabilities
References:
References: