CVE-2013-3952

The CVE affects Apple Mac OS X 10.8.x, specifically the XNU kernel’s fill_pipeinfo in bsd/kern/sys_pipe.c. The vulnerability allows local users to defeat KASLR by abusing the PROC_PIDFDPIPEINFO option to the proc_info system call on a kernel pipe handle. Potential impact is exposure of kernel add...

CVE-2013-3952

The fillpipeinfo function in bsd/kern/syspipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROCPIDFDPIPEINFO option to the procinfo system call for a kernel pipe handle...

CVE-2013-3954

CVE-2013-3954 affects Apple OS X/macOS kernels (e.g., OS X 10.8.x) where the posix_spawn API arguments to file/port actions are not properly validated. The underlying cause is insufficient bounds checking on data for file actions and port actions, enabling a local attacker to trigger a panic (DoS...

CVE-2013-3949

The posixspawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the POSIXSPAWNDISABLEASLR and POSIXSPAWNALLOWDATAEXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the...

Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)

Binary data 801016.prm...

Mac OS X : Java for OS X 2013-003

The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-003 update, which updates the Java version to 1.6.045. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...

Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)

Binary data 801018.prm...

Mac OS X NSSpellCheckerCheckString函数file:/// URI处理拒绝服务漏洞

Mac OS X是一款苹果产品中的操作系统 Mac OS X NSSpellCheckerCheckString函数存在一个安全漏洞，通过键盘输入或者处理'file:///'时可导致一个拒绝服务攻击，可使系统崩溃。此漏洞在禁用NSSpellCheckerCheckString函数时也可触发 0 Mac OS X 10.8 厂商解决方案 目前没有详细解决方案提供： http://www.apple.com/...

Mac OS X : OS X Server < 2.1.1 Multiple Vulnerabilities

The remote Mac OS X 10.8 host has a version of OS X Server installed that is prior to 2.1.1. It is, therefore, affected by the following vulnerabilities : - When the xml2 contrib module is enabled in PostgreSQL, an unprivileged database user can read or write arbitrary files, subject to the...

Mac OS X 10.8.x < 10.8.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.2. The newer version contains multiple security-related fixes for the following components : - BIND - Data Security - LoginWindow - Mobile Accounts - PHP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Healthcare Breaches Affect More than 10.8 M

Officials from the Department of Health and Human Services’ Office for Civil Rights have revised their list of healthcare information breaches over the past month to include 16 additional incidents, according to a GovInfoSecurity.com report. The list now totals 265 cases that have affected over...

cPanel &lt;= 10.8.x (cpwrap via mysqladmin) Local Root Exploit

No description provided by source. !/usr/bin/perl -w 10/01/06 - cPanel = 10.8.x cpwrap root exploit via mysqladmin use strict; haha oh wait.. my $cpwrap = "/usr/local/cpanel/bin/cpwrap"; my $mysqlwrap = "/usr/local/cpanel/bin/mysqlwrap"; my $pwd = pwd; chomp $pwd; $ENV'PERL5LIB' = "$pwd"; if ! -x...