Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
BID:40893
Info
Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
| Bugtraq ID: | 40893 |
| Class: | Configuration Error |
| CVE: |
CVE-2010-1381 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2010 12:00AM |
| Updated: | Jun 15 2010 12:00AM |
| Credit: | Apple |
| Vulnerable: |
Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Apple Mac OS X Server 10.6.4 Apple Mac OS X 10.6.4 |
Discussion
Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
Apple Mac OS X is prone to a security-bypass vulnerability that affects symbolic links within Samba (SMB) shares.
Attackers require access to a mounted SMB share to exploit this issue. An attacker can exploit this issue to bypass certain security restrictions to access arbitrary files. This may aid in further attacks.
This issue affects Mac OS X 10.5.8, Mac OS X Server 10.5.8, Mac OS X 10.6 through 10.6.3, and Mac OS X Server 10.6 through 10.6.3.
NOTE: This issue was previously covered in BID 40871 (Apple Mac OS X Prior to 10.6.4 Multiple Security Vulnerabilities), but has been given its own record to better document it.
Apple Mac OS X is prone to a security-bypass vulnerability that affects symbolic links within Samba (SMB) shares.
Attackers require access to a mounted SMB share to exploit this issue. An attacker can exploit this issue to bypass certain security restrictions to access arbitrary files. This may aid in further attacks.
This issue affects Mac OS X 10.5.8, Mac OS X Server 10.5.8, Mac OS X 10.6 through 10.6.3, and Mac OS X Server 10.6 through 10.6.3.
NOTE: This issue was previously covered in BID 40871 (Apple Mac OS X Prior to 10.6.4 Multiple Security Vulnerabilities), but has been given its own record to better document it.
Exploit / POC
Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
Apple Mac OS X 10.6
Apple Mac OS X Server 10.5.8
Apple Mac OS X 10.5.8
Apple Mac OS X Server 10.6.1
Apple Mac OS X 10.6.1
Apple Mac OS X 10.6.2
Apple Mac OS X Server 10.6.2
Apple Mac OS X 10.6.3
Apple Mac OS X Server 10.6.3
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
-
Apple MacOSXServUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6
-
Apple MacOSXUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.5.8
-
Apple SecUpdSrvr2010-004.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.8
-
Apple SecUpd2010-004.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.1
-
Apple MacOSXServUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6.1
-
Apple MacOSXUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6.2
-
Apple MacOSXUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.2
-
Apple MacOSXServUpdCombo10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.6.3
-
Apple MacOSXUpd10.6.4.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.3
-
Apple MacOSXServerUpd10.6.4.dmg
http://www.apple.com/support/downloads/
References
Apple Mac OS X Samba Wide Links Symbolic Link Handling Security Bypass Vulnerability
References:
References:
- Mac OS X Homepage (Apple)