BID:32839

RETIRED: Apple Mac OS X 2008-008 Multiple Security Vulnerabilities

Info

RETIRED: Apple Mac OS X 2008-008 Multiple Security Vulnerabilities

Bugtraq ID:	32839
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Dec 15 2008 12:00AM
Updated:	Dec 17 2008 09:21PM
Credit:	Richard Vaneeden of IOActive, Inc, Ben Loer of Princeton University, John Barnes of ESRI, Trevor Lalish-Menagh of Tamman Technologies, Inc., Alex Rosenberg of Ohmantics, Gary Teter of Paizo Publishing, Mauro Notarianni of PCAX Solutions, and Michael Samari
Vulnerable:	Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5

Not Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X 10.5.6

Discussion

RETIRED: Apple Mac OS X 2008-008 Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2008-008.

The security update addresses a total of 10 new vulnerabilities that affect the Apple Type Services, BOM, kernel, Libsystem, Managed Client, natd, and Podcast Producer components of Mac OS X. The advisory also contains security updates for 10 previously reported issues.

This BID is being retired. The following individual records have been created to better document the issues:

32870 Apple Podcast Producer Authentication-Bypass Vulnerability
32872 Apple Mac OS X UDF ISO File Handling Denial of Service Vulnerability
32873 Apple Mac OS X NFS Mounted Executable Exception Remote Denial of Service Vulnerability
32874 Apple Mac OS X 'natd' Remote Denial of Service Vulnerability
32875 Apple Mac OS X Type Services PDF File Remote Denial of Service Vulnerability
32876 Apple Mac OS X BOM CPIO Header Stack Buffer Overflow Vulnerability
32877 Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability
32879 Apple Mac OS X 'i386_set_ldt' and '1386_get_ldt' Multiple Integer Overflow Vulnerabilities
32880 Apple Mac OS X Managed Client Screen Saver Lock Bypass Vulnerability
32881 Apple Mac OS X 'strptime' API Memory Corruption Vulnerability

Exploit / POC

RETIRED: Apple Mac OS X 2008-008 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues will not require specific exploit code and may be trivial to exploit.

Solution / Fix

RETIRED: Apple Mac OS X 2008-008 Multiple Security Vulnerabilities

Solution:
The vendor has released an advisory and updates to address these issues. Please see the references for more information.

Apple Mac OS X Server 10.5