Apple Mac OS X 'ptrace' Mutex Handling Local Denial of Service Vulnerability

Bugtraq ID:	36915
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 04 2009 12:00AM
Updated:	Nov 04 2009 03:47PM
Credit:	Micheal Turner
Vulnerable:	Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6
Not Vulnerable:

Apple Mac OS X 'ptrace' Mutex Handling Local Denial of Service Vulnerability

Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition.

Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users.

Apple Mac OS X 'ptrace' Mutex Handling Local Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/36915.c

Apple Mac OS X 'ptrace' Mutex Handling Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X 'ptrace' Mutex Handling Local Denial of Service Vulnerability

References:

• Mac OS X Homepage (Apple)