Apple Mac OS X Directory Service CVE-2013-0984 Remote Buffer Overflow Vulnerability

Bugtraq ID:	60328
Class:	Unknown
CVE:	CVE-2013-0984
Remote:	Yes
Local:	No
Published:	Jun 04 2013 12:00AM
Updated:	Jun 04 2013 12:00AM
Credit:	Nicolas Economou
Vulnerable:	Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac Os X Server 10.6.8 Apple Mac Os X Server 10.6.7
Not Vulnerable:

Apple Mac OS X Directory Service CVE-2013-0984 Remote Buffer Overflow Vulnerability

Apple Mac OS X is prone to a remote buffer-overflow vulnerability.

An attacker can leverage this issue to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition.

The following versions are affected:

Mac OS X 10.6.8 Server
Mac OS X 10.6.7 Server
Mac OS X 10.6.6 Server
Mac OS X 10.6.5 Server
Mac OS X 10.6.4 Server
Mac OS X 10.6.3 Server
Mac OS X 10.6.2 Server
Mac OS X 10.6.1 Server
Mac OS X 10.6.0 Server

Apple Mac OS X Directory Service CVE-2013-0984 Remote Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/60328.py

Apple Mac OS X Directory Service CVE-2013-0984 Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X Directory Service CVE-2013-0984 Remote Buffer Overflow Vulnerability

References:

• Apple Homepage (Apple)