CVE-2009-0131

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

CVE-2009-0131

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

[SECURITY] Fedora 9 Update: am-utils-6.1.5-8.1.fc9

Am-utils includes an updated version of Amd, the popular BSD automounter. An automounter is a program which maintains a cache of mounted filesystems. Filesystems are mounted when they are first referenced by the user and unmounted after a certain period of inactivity. Amd supports a variety of...

Solaris 10 (sparc) : 139483-05

SunOS 5.10: ufs patch. Date this patch was last updated by Sun : Mar/12/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

Null pointer dereference

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-4160

CVE-2008-4160 affects the UFS module in Solaris 8–10 and OpenSolaris. The vulnerability is a local denial of service caused by a NULL pointer dereference in the Solaris ACL implementation, leading to a kernel panic. Connected advisories reference Solaris patch updates: 139483-05 (SunOS 5.10 SPARC...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-2539

The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or corrupt files in global filesystems, via unspecified vectors...

Solaris 10 (x86) : 124259-06

SunOS 5.10x86: ufs and nfs driver patch. Date this patch was last updated by Sun : Jun/12/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 124258-07

SunOS 5.10: ufs and nfs driver patch. Date this patch was last updated by Sun : Jun/14/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Apple Mac OS X DMG UFS byte_swap_sbin() function Integer Overflow

Overview The Apple Mac OS X byteswapsbin function contains an integer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description DMG files are disk images that can contain a variety of...

CVE-2007-0299

Integer overflow in the byteswapsbin function in bsd/ufs/ufs/ufsbyteorder.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service kernel panic by mounting a crafted Unix File System UFS DMG image, which triggers an invalid pointer dereference...

CVE-2007-0299

The CVE-2007-0299 vulnerability affects Apple Mac OS X 10.4.8 where the integer overflow in the byte_swap_sbin() function of the UFS DMG handling (ufs_byte_order.c) can be triggered by mounting a crafted DMG image. This may cause an invalid pointer dereference leading to a denial-of-service (kern...

CVE-2007-0299

Integer overflow in the byteswapsbin function in bsd/ufs/ufs/ufsbyteorder.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service kernel panic by mounting a crafted Unix File System UFS DMG image, which triggers an invalid pointer dereference...

CVE-2007-0267

The ufslookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service kernel panic and possibly corrupt other filesystems by mounting a crafted UNIX File System UFS DMG image that contains a corrupted directory entry struct direct, related to the...

Cross site scripting

The ufslookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service kernel panic and possibly corrupt other filesystems by mounting a crafted UNIX File System UFS DMG image that contains a corrupted directory entry struct direct, related to the...

Apple Mac OS X DMG UFS UFS_LookUp拒绝服务漏洞

Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 问题是由于DMG映象文件中的特殊构建的UFS文件系统可引起ufslookup函数调用ufsdirbad，当破坏的目录条目被读取的时候，可导致内核出现问题，造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有解决方案： http://www.apple.com/macosx/ 可测试如下DMG文件：...

Apple Mac OS X DMG UFS Byte_Swap_Sbin()整数溢出漏洞

Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件存在整数溢出问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可能以系统进程权限执行任意指令。 UFS字节交换函数中的byteswapsbin函数此代码在FreeBSD和它的Mac OS X XNU中不包含，用于little和big-endian系统之间的文件流兼容存在整数溢出，精心构建恶意DMG文件，诱使用户解析，可导致非法内存地址访问，造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8...

CVE-2007-0267

The CVE-2007-0267 issue affects Mac OS X 10.4.8 and FreeBSD 6.1 kernels, where the ufs_lookup function can be triggered to cause a denial of service (kernel panic) and potentially corrupt other filesystems by mounting a crafted UFS DMG image containing a corrupted directory entry (struct direct) ...