Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure

Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure // source: https://www.securityfocus.com/bid/46982/info Apple Mac OS X is prone to a local information-disclosure vulnerability because of an integer-overflow error in the HFS subsystem. A local attacker can exploit this issue to obtain...

SuSE 10 Security Update : Linux kernel (x86) (ZYPP Patch Number 6925)

This update fixes lots of bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. - A stack-based buffer overflow in the HFS subsystem of the Linux kernel allows remote attackers to have an unspecified impact via a crafted Hierarchical File System HFS filesystem, related to the...

Apple Mac OS X HFS硬链接本地拒绝服务漏洞

BUGTRAQ ID: 39658 CVECAN ID: CVE-2010-0105 Mac OS X是苹果家族机器所使用的操作系统。 大多数现代的操作系统都不允许目录中存在硬链接以防范无限递归，但Mac操作系统的HFS文件系统实现的Time Machine备份机制在目录中使用了硬链接，本地用户可以通过执行恶意程序导致拒绝服务。 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

Hardcoded credentials

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...

CVE-2010-0105

Affected software/stack: Apple Mac OS X 10.5.8 and 10.6.x (before 10.6.5), involving the HFS/HFS+ filesystem and the diskdev_cmds components (fsck_hfs). Vulnerability details: The HFS implementation does not prevent hard linking to directories, permitting deeply nested directory structures via cr...

CVE-2010-0105

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...

MacOS X 10.6 HFS File System Attack (Denial of Service)

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com http://securityreason.com/achievementexploitalert/15 NOTE: This DoS will b...

Mac OS X 10.6.3 Filesystem HFS Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 01.04.2010 - - Pub.: 23.04.2010 CVE: CVE-2010-0105 Risk: Medium Affected Software: - - MacOS 10.6 tested on 1062 an...

Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)

// -----BEGIN PGP SIGNED MESSAGE----- // Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com http://securityreason.com/achievementexploitalert/15 NOTE: This DoS will be localized in phase Checking...

MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ============================================================= MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability ============================================================= MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerabili...

Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)

Apple Mac OSX 10.6 - HFS FileSystem Denial of Service // -----BEGIN PGP SIGNED MESSAGE----- // Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com...

DSA-2003-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

Ubuntu Update for Linux kernel vulnerabilities USN-894-1

Ubuntu Update for Linux kernel vulnerabilities USN-894-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8941.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-894-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CentOS 4 : kernel (CESA-2010:0076)

Updated kernel packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : linux, linux-source-2.6.15 vulnerabilities (USN-894-1)

Amerigo Wang and Eric Sesterhenn discovered that the HFS and ext4 filesystems did not correctly check certain disk structures. If a user were tricked into mounting a specially crafted filesystem, a remote attacker could crash the system or gain root privileges. CVE-2009-4020, CVE-2009-4308 It was...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel: hfs buffer overflow

Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System HFS filesystem, related to the hfsreaddir function in fs/hfs/dir.c...

openSUSE Security Update : kernel (kernel-1749)

The openSUSE 11.1 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. Following security issues were fixed: CVE-2009-4536: A underflow in the e1000 jumbo ethernet frame handling could be use by link-local remote attackers to crash the machine or potentially execute code in...

Linux Kernel HFS子系统栈溢出漏洞

CVE ID: CVE-2009-4020 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fs/hfs/dir.c文件中的hfsreaddir函数存在栈溢出漏洞，特制的多级文件系统（HFS）可以在 hfsbnoderead函数的memcpy调用过程中触发这个溢出。攻击者可以提供源缓冲区和长度，目标缓冲区是固定长度的本地变量，这个变量存储在了hfsbnoderead调用程序的栈帧中（hfsreaddir）。由于在试图读取文件系统上目录时都会执行 hfsreaddir函数，因此用户试图检查任何文件系统内容时都会调用这个函数。 Linux...

CVE-2009-4020

Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System HFS filesystem, related to the hfsreaddir function in fs/hfs/dir.c...