Apple Mac OS X 'FSEvents' Local Information Disclosure Vulnerability

Bugtraq ID:	33821
Class:	Design Error
CVE:	CVE-2009-0015
Remote:	No
Local:	Yes
Published:	Feb 12 2009 12:00AM
Updated:	Feb 18 2009 04:37PM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X 'FSEvents' Local Information Disclosure Vulnerability

The FSEvents system included with Apple Mac OS X is prone to a local information-disclosure vulnerability.

A local attacker may exploit this issue to gain potentially sensitive information that may aid in further attacks.

This issue affects Mac OS X 10.5.6 (both client and server).

NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apple Mac OS X 'FSEvents' Local Information Disclosure Vulnerability

Attackers can use readily available tools to exploit this issue.

Apple Mac OS X 'FSEvents' Local Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Apple Mac OS X Server 10.5.6

• Apple SecUpdSrvr2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_

Apple Mac OS X 'FSEvents' Local Information Disclosure Vulnerability

References:

• About the security content of Security Update 2009-001 (Apple)
  
• Mac OS X Homepage (Apple)