Apple Mac OS X Multiple Vulnerabilities

Bugtraq ID:	8917
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 28 2003 12:00AM
Updated:	Oct 28 2003 12:00AM
Credit:	Apple has credited multiple sources with discovering these issues including Dave G. from @stake, Anthony Holder and Chris Adams.
Vulnerable:	Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.0 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0
Not Vulnerable:	Apple Mac OS X 10.3

Apple Mac OS X Multiple Vulnerabilities

Apple Mac OS X 10.3 (Panther) has been released to address multiple new and previously known vulnerabilities. These issues may cumulatively allow an attacker to cause denial of service, arbitrary code execution, privilege escalation and unauthorized access.

Apple Mac OS X Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple Mac OS X Multiple Vulnerabilities

Solution:
These issues have been addressed in Mac OS X 10.3 (Panther).

It should be noted that the Mac OS X 10.3 (Panther) upgrade is commercially available. It is not currently known if security updates will be backported to Mac OS X 10.2.x (Jaguar).

Apple Mac OS X Multiple Vulnerabilities

References:

• Mac OS X Arbitrary File Overwrite via Core Files ("@stake Advisories" )