CVE-2011-4330

Stack-based buffer overflow in the hfsmac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via an HFS image with a crafted len field...

PT-2011-1068 · Suse +2 · Ext4Dev-Kmp-Trace +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6 ext4dev-kmp-trace affected versions not specified Description: The issue concerns a stack-based buffer overflow in the Linux kernel, specifically in the hfs mac2asc function, which can be triggered by a crafted HFS...

Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)

This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...

CVE-2011-0180

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...

Integer overflow

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...

CVE-2011-0180

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...

CVE-2011-0180

CVE-2011-0180 describes an integer overflow in OS X HFS handling (F_READBOOTSTRAP ioctl) that can allow a local unprivileged user to read arbitrary files on HFS, HFS+, or HFS+J. Affected: Apple Mac OS X kernel prior to 10.6.7. Root cause: overflow in enforcing bootstrap data bound (1024 bytes) ca...

Apple HFS+ Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Apple HFS+ Information Disclosure Vulnerability Release Date: 2011-03-22 Application: Apple OS X kernel XN...

Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7. Mac OS X 10.6.7 contains security fixes for the following products : - AirPort - Apache - AppleScript - ATS - bzip2 - CarbonCore - ClamAV - CoreText - File Quarantine - HFS - ImageIO - Image RAW - Installer - Kerbero...

Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure

// source: https://www.securityfocus.com/bid/46982/info Apple Mac OS X is prone to a local information-disclosure vulnerability because of an integer-overflow error in the HFS subsystem. A local attacker can exploit this issue to obtain sensitive information that may lead to further attacks. Due ...

Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities

Binary data 800796.prm...

Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure

Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure // source: https://www.securityfocus.com/bid/46982/info Apple Mac OS X is prone to a local information-disclosure vulnerability because of an integer-overflow error in the HFS subsystem. A local attacker can exploit this issue to obtain...

SuSE 10 Security Update : Linux kernel (x86) (ZYPP Patch Number 6925)

This update fixes lots of bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. - A stack-based buffer overflow in the HFS subsystem of the Linux kernel allows remote attackers to have an unspecified impact via a crafted Hierarchical File System HFS filesystem, related to the...

Apple Mac OS X HFS硬链接本地拒绝服务漏洞

BUGTRAQ ID: 39658 CVECAN ID: CVE-2010-0105 Mac OS X是苹果家族机器所使用的操作系统。 大多数现代的操作系统都不允许目录中存在硬链接以防范无限递归，但Mac操作系统的HFS文件系统实现的Time Machine备份机制在目录中使用了硬链接，本地用户可以通过执行恶意程序导致拒绝服务。 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

Hardcoded credentials

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...

CVE-2010-0105

Affected software/stack: Apple Mac OS X 10.5.8 and 10.6.x (before 10.6.5), involving the HFS/HFS+ filesystem and the diskdev_cmds components (fsck_hfs). Vulnerability details: The HFS implementation does not prevent hard linking to directories, permitting deeply nested directory structures via cr...

CVE-2010-0105

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...

MacOS X 10.6 HFS File System Attack (Denial of Service)

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com http://securityreason.com/achievementexploitalert/15 NOTE: This DoS will b...

Mac OS X 10.6.3 Filesystem HFS Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 01.04.2010 - - Pub.: 23.04.2010 CVE: CVE-2010-0105 Risk: Medium Affected Software: - - MacOS 10.6 tested on 1062 an...

Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)

// -----BEGIN PGP SIGNED MESSAGE----- // Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com http://securityreason.com/achievementexploitalert/15 NOTE: This DoS will be localized in phase Checking...