Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
BID:33796
Info
Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
| Bugtraq ID: | 33796 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2009-0140 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2009 12:00AM |
| Updated: | Feb 17 2009 10:27PM |
| Credit: | Apple |
| Vulnerable: |
Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
Apple Mac OS X SMB File System is prone to a remote denial-of-service vulnerability.
An attacker who can trick an unsuspecting victim into connecting to a malicious SMB server may exploit this issue to cause the affected computer to shut down.
NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Apple Mac OS X SMB File System is prone to a remote denial-of-service vulnerability.
An attacker who can trick an unsuspecting victim into connecting to a malicious SMB server may exploit this issue to cause the affected computer to shut down.
NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
Attackers can user readily available tools to exploit this issue.
Attackers can user readily available tools to exploit this issue.
Solution / Fix
Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.11
Apple Mac OS X 10.5.6
Apple Mac OS X Server 10.5.6
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
Apple Mac OS X Server 10.4.11
-
Apple SecUpdSrvr2009-001PPC.dmg
for PPC
http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_ -
Apple SecUpdSrvr2009-001Univ.dmg
Universal
http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_
Apple Mac OS X 10.4.11
-
Apple SecUpd2009-001Intel.dmg
for Intel
http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_ -
Apple SecUpd2009-001PPC.dmg
for PPC
http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _
Apple Mac OS X 10.5.6
-
Apple SecUpd2009-001.dmg
http://support.apple.com/downloads/Security_Update_2009_001__Leopard_
Apple Mac OS X Server 10.5.6
-
Apple SecUpdSrvr2009-001.dmg
http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_
References
Apple Mac OS X SMB File System Remote Denial Of Service Vulnerability
References:
References: