Mac OS X UFS ufs_dirbad() Function Local DoS

2007-01-12T11:03:43
ID OSVDB:32686
Type osvdb
Reporter LMH(lmh@info-pull.com)
Modified 2007-01-12T11:03:43

Description

Vulnerability Description

Mac OS X contains a flaw that may allow a local denial of service. The issue is triggered when a specially crafted DMG image file triggers a call to ufs_dirbad(), which leads to a kernel panic and will result in loss of availability for the platform.

Solution Description

Upgrade to version 10.4.9 or higher, as it has been reported to fix this vulnerability. In addition, Apple has released a patch for some older versions.

Short Description

Mac OS X contains a flaw that may allow a local denial of service. The issue is triggered when a specially crafted DMG image file triggers a call to ufs_dirbad(), which leads to a kernel panic and will result in loss of availability for the platform.

References:

Vendor Specific Advisory URL Security Tracker: 1017751 Secunia Advisory ID:24479 Secunia Advisory ID:23725 Other Advisory URL: http://projects.info-pull.com/moab/MOAB-12-01-2007.html Mail List Post: http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html FrSIRT Advisory: ADV-2007-0171 CVE-2007-0267 Bugtraq ID: 22036