Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
BID:31708
Info
Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
| Bugtraq ID: | 31708 |
| Class: | Design Error |
| CVE: |
CVE-2008-4212 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2008 12:00AM |
| Updated: | Oct 15 2008 04:17PM |
| Credit: | Ralf Meyer |
| Vulnerable: |
Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
Apple Mac OS X is prone to a security-bypass vulnerability related to the 'hosts.equiv' configuration file.
Attackers may be able to exploit this issue to log in as the root user via 'rlogind' without proper authentication from specific trusted hosts.
NOTE: This issue was previously covered in BID 31681 (Apple Mac OS X 2008-007 Multiple Security Vulnerabilities) but has been given its own record to better document this vulnerability.
Apple Mac OS X is prone to a security-bypass vulnerability related to the 'hosts.equiv' configuration file.
Attackers may be able to exploit this issue to log in as the root user via 'rlogind' without proper authentication from specific trusted hosts.
NOTE: This issue was previously covered in BID 31681 (Apple Mac OS X 2008-007 Multiple Security Vulnerabilities) but has been given its own record to better document this vulnerability.
Exploit / POC
Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
An attacker may exploit this issue using commonly available tools.
An attacker may exploit this issue using commonly available tools.
Solution / Fix
Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
Solution:
The vendor has released fixes; please see the references for more information.
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.5.5
Apple Mac OS X 10.5.5
Solution:
The vendor has released fixes; please see the references for more information.
Apple Mac OS X Server 10.4.11
-
Apple SecUpdSrvr2008-007PPC.dmg
(PPC)
http://www.apple.com/support/downloads/securityupdate2008007serverppc. html -
Apple SecUpdSrvr2008-007Univ.dmg
(Universal)
http://www.apple.com/support/downloads/securityupdate2008007serveruniv ersal.html
Apple Mac OS X 10.4.11
-
Apple SecUpd2008-007Intel.dmg
(Intel)
http://www.apple.com/support/downloads/securityupdate2008007clientinte l.html -
Apple SecUpd2008-007PPC.dmg
(PPC)
http://www.apple.com/support/downloads/securityupdate2008007clientppc. html
Apple Mac OS X Server 10.5.5
-
Apple SecUpdSrvr2008-007.dmg
http://www.apple.com/support/downloads/securityupdate2008007serverleop ard.html
Apple Mac OS X 10.5.5
-
Apple SecUpd2008-007.dmg
http://www.apple.com/support/downloads/securityupdate2008007clientleop ard.html
References
Apple Mac OS X 'hosts.equiv' Security Bypass Vulnerability
References:
References: