Apple Mac OS X Kernel Memory Multiple Local Information Disclosure Vulnerabilities

Bugtraq ID:	34202
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 23 2009 12:00AM
Updated:	Mar 23 2009 05:46PM
Credit:	mu-b from Digit-Labs
Vulnerable:	Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1
Not Vulnerable:

Apple Mac OS X Kernel Memory Multiple Local Information Disclosure Vulnerabilities

The Apple Mac OS X kernel is prone to multiple information-disclosure vulnerabilities.

Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks or to cause denial-of-service conditions.

Apple Mac OS X Kernel Memory Multiple Local Information Disclosure Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/34202-xnu-macfsstat-leak.c
• /data/vulnerabilities/exploits/34202-xnu-vfssysctl-dos.c
• /data/vulnerabilities/exploits/34202-xnu-profil-leak.c

Apple Mac OS X Kernel Memory Multiple Local Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X Kernel Memory Multiple Local Information Disclosure Vulnerabilities

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)