BID:39245

Apple Mac OS X iChat Server CVE-2010-0503 Remote Code Execution Vulnerability

Info

Apple Mac OS X iChat Server CVE-2010-0503 Remote Code Execution Vulnerability

Bugtraq ID:	39245
Class:	Boundary Condition Error
CVE:	CVE-2010-0503
Remote:	Yes
Local:	No
Published:	Mar 29 2010 12:00AM
Updated:	Mar 29 2010 12:00AM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5

Not Vulnerable:

Discussion

Apple Mac OS X iChat Server CVE-2010-0503 Remote Code Execution Vulnerability

Apple Mac OS X is prone to a remote code-execution vulnerability that affects the iChat Server component.

Successful exploits may allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 39020 (Apple Mac OS X APPLE-SA-2010-03-29-1 Multiple Security Vulnerabilities) but has been assigned its own record to better document it.

Exploit / POC

Apple Mac OS X iChat Server CVE-2010-0503 Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Apple Mac OS X iChat Server CVE-2010-0503 Remote Code Execution Vulnerability

Solution:
The vendor released an update. Please see the references for details.

Apple Mac OS X Server 10.5