Apple Mac OS X DMG UFS UFS_LookUp拒绝服务漏洞

Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 问题是由于DMG映象文件中的特殊构建的UFS文件系统可引起ufslookup函数调用ufsdirbad，当破坏的目录条目被读取的时候，可导致内核出现问题，造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有解决方案： http://www.apple.com/macosx/ 可测试如下DMG文件：...

MOAB-10-01-2007: Apple DMG UFS ffs_mountfs() Integer Overflow Vulnerability

Summary The ffsmountfs function, part of the UFS filesystem handling code shared between FreeBSD and Mac OS X XNU is affected by an integer overflow vulnerability, leading to an exploitable denial of service condition and potential arbitrary code execution. This issue is related to those publishe...

MOAB-12-01-2007: Apple DMG UFS ufs_lookup() Denial of Service Vulnerability

Summary A specially crafted UFS filesystem in a DMG image can cause the ufslookup function to call ufsdirbad when a corrupted directory entry is being read, leading to a kernel panic denial of service. This issue can't lead to arbitrary code execution. Affected versions This issue has been verifi...

MOAB-11-01-2007: Apple DMG UFS byte_swap_sbin() Integer Overflow Vulnerability

Summary The byteswapsbin function, one of the UFS byte swapping routines this code isn't present in FreeBSD and it's Mac OS X XNU-specific; used for compatibility of filesystem streams between little and big-endian systems is affected by a integer overflow vulnerability, leading to an exploitable...

Mac OS X / Apple Finder multiple file system parsing vulnerabilities

Buffer overflow on oversized DMG volume label in Apple Finder. Integer overflows on UFS DMG image parsing. DoS on processing UFS and HFS+ volumes...

Apple Mac OS X DMG UFS镜像FFS_MountFS函数整数溢出漏洞

Apple Mac OS X是苹果家族计算机所使用的操作系统。 Apple Mac OS X的ffsmountfs函数在处理UFS文件系统磁盘镜像时存在整数溢出漏洞，如果攻击者能够诱骗用户加载恶意的UFS DMG镜像的话，就会触发堆溢出，导致执行任意代码。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service

Apple Mac OSX 10.4.8 - DMG UFS UFSLookUp Denial of Service source: https://www.securityfocus.com/bid/22036/info Apple Mac OS X is prone to a remote denial-of-service vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit...

Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service

source: https://www.securityfocus.com/bid/22036/info Apple Mac OS X is prone to a remote denial-of-service vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resulti...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

Apple Mac OSX 10.4.8 - DMG UFS ByteSwapSbin Integer Overflow source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploi...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resultin...

Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow

Apple Mac OSX 10.4.8 - DMG UFS FFSMountFS Integer Overflow source: https://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit...

Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow

source: https://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to execute arbitrary code with...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824

CVE-2006-5824 affects FreeBSD 6.1; integer overflow in the ffs_rdextattr function can be triggered by a crafted UFS filesystem to cause a local denial of service (kernel panic) and a heap-based buffer overflow. The entry notes this is a different issue from CVE-2006-5679, and that third parties s...

Sun Solaris 10 UFS本地拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的文件系统实现在挂接恶意的分区时存在漏洞，攻击者可能利用此漏洞导致服务器崩溃。 Solaris没有正确地处理UFS文件系统中被破坏的数据结构，允许攻击者通过诱骗用户加载特制的文件系统镜像导致系统崩溃，或破坏文件系统。 Sun Solaris 10.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sunsolve.sun.com/security...

FreeBSD UFS文件系统本地整数溢出漏洞

FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD 6.1内核的UFS文件系统处理代码没有正确的处理被破坏的数据结构，本地攻击者可能利用此漏洞导致整数溢出。 在加载特制的UFS文件分区时，攻击者可以直接控制所分配的内核内存数量，通过ffsmountfs函数及之后对malloc、umalargemalloc和pagealloc的调用控制对kmemalloc所传送的值。很大的或无效的大小参数会导致内核忙碌。如果从文件系统流拷贝了用户所控制数据的话，则很低的或0大小参数可能导致可利用的堆溢出。 FreeBSD FreeBSD 6.1...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5726

CVE-2006-5726 affects the UFS filesystem in Solaris 10. The vulnerability is triggered by the alloccgblk function when mounting crafted UFS filesystems with malformed data structures, allowing local users to cause a denial of service through memory corruption. The published entries (NVD, CVE, CVE...