Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability

Bugtraq ID:	32877
Class:	Boundary Condition Error
CVE:	CVE-2008-4220
Remote:	Yes
Local:	No
Published:	Dec 15 2008 12:00AM
Updated:	Dec 17 2008 10:32PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X 10.5.6

Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability

The Apple Mac OS X 'Libsystem' is prone to an integer-overflow vulnerability in the 'inet_net_pton' API because it fails to adequately bounds-check input data.

The affected function itself is not directly exploitable; successful exploits may allow attackers to execute arbitrary code or cause denial-of service conditions in applications that use the vulnerable API.

NOTE: This issue was previously covered in BID 32839 (Apple Mac OS X 2008-008 Multiple Security Vulnerabilities), but has been given its own record to better document the issue.

Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability

Solution:
Apple has released an advisory and updates to address this issue. Please see the references for more information.


Apple Mac OS X Server 10.5

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2008-008PPC.dmg
  http://www.apple.com/support/downloads/


• Apple SecUpdSrvr2008-008Univ.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.11

• Apple SecUpd2008-008Intel.dmg
  http://www.apple.com/support/downloads/


• Apple SecUpd2008-008PPC.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.1

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.1

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.2

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.2

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

• Apple MacOSXUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.4

• Apple MacOSXServerUpdCombo10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.5

• Apple MacOSXServerUpd10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.5

• Apple MacOSXUpd10.5.6.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 'inet_net_pton' API Integer Overflow Vulnerability

References:

• Mac OS X Homepage (Apple)