BID:29412

RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

Info

RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

Bugtraq ID:	29412
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	May 28 2008 12:00AM
Updated:	Jun 04 2008 12:23AM
Credit:	Discovery is credited to the vendor, Alex deVries and Robert Rich, Rosyna of Unsanity, Melissa O'Neill of Harvey Mudd College, Brian Mastenbrook, Paul Haddad of PTH Consulting, Rodrigo Carvalho of Core Security Technologies, Gynvael Coldwind of Hispasec, D
Vulnerable:	Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.5

Not Vulnerable:	Apple Mac OS X Server 10.5.3 Apple Mac OS X 10.5.3

Discussion

RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2008-003 and Mac OS X/Mac OS X Server 10.5.3.

The security update addresses a total of 19 new vulnerabilities that affect the AFP Server, AppKit, Apple Pixlet Video, ATS, CFNetwork, CoreFoundation, CoreGraphics, CoreTypes, CUPS, Help Viewer, iCal, International Components for Unicode, Image Capture, ImageIO, Kernel, Mail, Single Sign-On, and Wiki Server components of Mac OS X.

NOTE: This BID is being retired; the following individual records have been created to better document the issues:

29480 Apple Mac OS X CoreGraphics PDF Handling Code Execution Vulnerability
29481 Apple Mac OS X CoreTypes Unsafe Content Warning Weakness
29483 Apple Mac OS X Help Viewer 'help:topic' URI Buffer Overflow Vulnerability
29484 Apple Mac OS X CUPS Debug Logging Information Disclosure Vulnerability
29486 Apple Mac OS X iCal '.ics' File Handling Remote Code Execution Vulnerability
29487 Apple Mac OS X AppKit Malformed File Remote Code Execution Vulnerability
29488 Apple Mac OS X International Components for Unicode Information Disclosure Vulnerability
29489 Apple Mac OS X Pixlet Video Multiple Unspecified Memory Corruption Vulnerabilities
29490 Apple Mac OS X AFP Server File Sharing Unauthorized File Access Vulnerability
29491 Apple Mac OS X CoreFoundation CFData Object Handling Code Execution Vulnerability
29492 Apple Mac OS X Apple Type Services PDF Handling Code Execution Vulnerability
29493 Apple Mac OS X CFNetwork SSL Client Certificate Handling Information Disclosure Vulnerability
29500 Apple Mac OS X Mail Memory Corruption Vulnerability
29501 Apple Mac OS X Image Capture Webserver Directory Traversal Vulnerability
29511 Apple Mac OS X Wiki Server User Name Enumeration Weakness
29513 Apple Mac OS X ImageIO BMP/GIF Image Information Disclosure Vulnerability
29514 Apple Mac OS X ImageIO JPEG2000 Handling Remote Code Execution Vulnerability
29520 Apple Mac OS X Single Sign-On 'sso_util' Local Information Disclosure Vulnerability
29521 Apple Mac OS X Image Capture Local Arbitrary File Overwrite Vulnerability

Exploit / POC

RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

To exploit some of these issues, an attacker has to entice a victim into visiting a malicious web page or opening a malicious file. For other issues, the attacker must send malformed network packets. In some cases, local access is required.

Solution / Fix

RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

Solution:
A vendor advisory is available to address these issues. Please see the referenced advisory for more information.

Apple Mac OS X 10.5