Apple MacOS 9 Classic Reverse DNS Lookup DoS Vulnerability

Bugtraq ID:	4151
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Feb 20 2002 12:00AM
Updated:	Feb 20 2002 12:00AM
Credit:	Discovered by Jason Linhart.
Vulnerable:	Apple Mac OS 9 9.2.2 Apple Mac OS 9 9.2.1 Apple Mac OS 9 9.2 Apple Mac OS 9 9.1 Apple Mac OS 9 9.0.4 Apple Mac OS 9 9.0
Not Vulnerable:

Apple MacOS 9 Classic Reverse DNS Lookup DoS Vulnerability

An issue has been reported in MacOS 9 Classic with DNS lookups enabled on the server. Reportedly, if a reverse DNS lookup is being performed on a specific IP range by a host using a Classic application running under MacOS X, the classic environment could crash.

Apparently this issue is exploitable if the DNS server responsible for certain IP addresses returns an invalid packet.

Reports indicate that MacOS X is not affected by this issue and will continue to function normally.

Apple MacOS 9 Classic Reverse DNS Lookup DoS Vulnerability

No exploit code required.

Apple MacOS 9 Classic Reverse DNS Lookup DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple MacOS 9 Classic Reverse DNS Lookup DoS Vulnerability

References:

• DNS Vulnerability can crash Mac OS 9, Classic (Macintosh News Network)