|
Mac OS X Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA9814
|
|
|
Release Date:
|
2003-09-23
|
|
Last Update:
|
2003-10-14
|
|
Popularity:
|
11,529 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple Macintosh OS X
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Apple has acknowledged several vulnerabilities in Mac OS X, which potentially can be exploited by malicious people to compromise a vulnerable system or cause a DoS (Denial of Service).
Apple reports that Mac OS X is affected by the buffer management vulnerabilities in OpenSSH. According to Apple, these can be exploited to cause the SSH service to crash.
For more information:
SA9743
The OpenSSL implementation is affected by various vulnerabilities in the ASN.1 parser, which could lead to a DoS and potentially system access.
For more information:
SA9886
Boundary errors in the Sendmail address parsing code and ruleset parsing can be exploited to cause buffer overflows. This potentially allows execution of arbitrary code.
For more information:
SA9758
An off-by-one error in the "fb_realpath()" function can potentially be exploited to execute arbitrary code via an application using this function. This is done by specifying a path, which resolves to a 1024 character long path length. This vulnerability was also addressed in Mac OS X 10.2.6.
For more information:
SA9535
An unspecified error in the "arplookup()" function can be exploited by malicious people on a LAN to exhaust kernel memory and cause a DoS by sending multiple spoofed ARP requests.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
