Apple Mac OS X "ipcomp6_input()" Denial of Service - Advisories

Apple Mac OS X "ipcomp6_input()" Denial of Service

Secunia Advisory:	SA29130
Release Date:	2008-02-27

Critical:	Moderately critical
Impact:	DoS
Where:	From remote
Solution Status:	Unpatched

OS:	Apple Macintosh OS X


CVE reference:	CVE-2008-0177 (Secunia mirror)

	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description: A vulnerability has been reported in Apple Mac OS X, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error within the "ipcomp6_input()" function in bsd/netinet6/ipcomp_input.c when processing IPv6 packets with an IPComp header. This can be exploited to crash a vulnerable system by sending a specially crafted IPv6 packet. This is related to: SA28788 The vulnerability is reported in Mac OS X 10.5.1 and 10.5.2. Other versions may also be affected. Solution: Use a firewall to block IPv6 packets containing an IPComp header. Provided and/or discovered by: Discovered in the KAME Project by Shoichi Sakane. Reported in Mac OS X by mu-b. Original Advisory: http://www.digit-labs.org/files/exploits/xnu-ipv6-ipcomp.c Other References: SA28788: http://secunia.com/advisories/28788/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

121 Related Secunia Security Advisories, displaying 10

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Ubuntu update for openssl

3.	Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation

4.	Citrix Access Gateway Unspecified Authentication Bypass

5.	Novell Client Login Long Username/Contex t Buffer Overflow

6.	Build A Niche Store "q" Cross-Site Scripting

7.	ZyXEL ZyWALL 100 "Referer" Cross-Site Scripting Vulnerability

8.	IBM Lotus Quickr WYSIWYG Editors Unspecified Cross-Site Scripting

9.	cPanel Cross-Site Scripting and Request Forgery Vulnerabilities

10.	Gentoo update for aterm, eterm, rxvt, mrxvt, multi-aterm, wterm, and rxvt-unicode