Apple Mac OS X Server NetInfo Setup Tool fails to validate command line parameters

Overview

Apple Mac OS X Server NeST tool contains a vulnerability in the processing of command line arguments that could allow an attacker to execute arbitrary code.

Description

NeST is the NetInfo Setup Tool for Apple Mac OS X Server. There is a buffer overflow vulnerability in the way NeST performs bounds checking on command line arguments. By supplying the -target command line parameter with an overly long string of characters, a local user could execute arbitrary code on the system with privileges of the NeST process.

Please note that NeST executes with root privileges.

---

Impact

A local user could execute arbitrary code with privileges of the NeST process, possibly root.

---

Solution

Apply Update

Apple has released Apple Security update 2005-005 to correct this issue.

---

Vendor Information

354486

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Apple Computer Inc. __ Affected

Updated: May 13, 2005

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Please see <http://docs.info.apple.com/article.html?artnum=301528&gt; for more information.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23354486 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://www.idefense.com/application/poi/display?id=239&gt;
• <http://secunia.com/advisories/15227/&gt;
• <http://docs.info.apple.com/article.html?artnum=301528&gt;

Acknowledgements

This vulnerability was reported by iDEFENSE Labs who acknowledges Nico for providing information concerning this vulnerability.

This document was written by Jeff Gennari.

Other Information

CVE IDs:	CVE-2005-0594
Severity Metric:	10.69 Date Public: