|
Mac OS X Update Fixes Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA15436
|
|
|
Release Date:
|
2005-05-20
|
|
Popularity:
|
10,018 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
Exposure of system information
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple Macintosh OS X
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-0974
CVE-2005-1333
CVE-2005-1472
CVE-2005-1473
CVE-2005-1474
|
|
Description:
Apple has issued an update for Mac OS X, which fixes various vulnerabilities.
1) An input validation error can be exploited to access arbitrary files on a Bluetooth-enabled system using directory traversal attacks via the Bluetooth file and object exchange services.
2) An error can be exploited by malicious web sites to download and install Dashboard widgets on a user's system via Safari without the Safe Download Validation warning.
3) A weakness in two system calls allows local users to gain knowledge of the names of files placed in unsearchable locations (e.g. files in users' ~/Public/Drop Box).
4) An error in the "nfs_mount()" function due to insufficient input value checks can be exploited by malicious, local users to cause a kernel panic.
5) An error can be exploited by malicious people with physical access to a system to start background applications behind locked screensaver windows.
The vulnerabilities affect Mac OS X v10.4 and Mac OS X Server v10.4.
Solution:
Apply Mac OS X 10.4.1 Update.
http://www.apple.com/support/downloads/
Provided and/or discovered by:
1) Kevin Finisterre, digitalmunition.com.
3) John M. Glenn
Original Advisory:
Apple:
http://docs.info.apple.com/article.html?artnum=301630
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
