Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
BID:6331
Info
Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
| Bugtraq ID: | 6331 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 07 2002 12:00AM |
| Updated: | Dec 07 2002 12:00AM |
| Credit: | Vulnerability discovery credited to shibby <[email protected]>. |
| Vulnerable: |
Apple Mac OS X Server 10.2.2 Apple Mac OS X 10.2.2 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware.
It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates another directory of the same name, then attempts to move the directory up one level in the hierarchy, the system reacts unpredictably. It has been reported that this can cause a crash of the system.
Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware.
It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates another directory of the same name, then attempts to move the directory up one level in the hierarchy, the system reacts unpredictably. It has been reported that this can cause a crash of the system.
Exploit / POC
Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
The following exploit has been made available by shibby <[email protected]>:
mkdir ~/mydir; cd ~/mydir; mkdir mydir; mv mydir ..
The following exploit has been made available by shibby <[email protected]>:
mkdir ~/mydir; cd ~/mydir; mkdir mydir; mv mydir ..
Solution / Fix
Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Apple Mac OS X Directory Kernel Panic Denial Of Service Vulnerability
References:
References: