98 matches found
CVE-2009-2190
The CVE-2009-2190 issue affects Mac OS X 10.5 through 10.5.7 with the launchd inetd-based service. Triggered by opening many connections to a launchd service, it can cause an individual service outage. Remediation is provided in Mac OS X 10.5.8 Update / Security Update 2009-003, which addresses t...
CVE-2009-2190: Undefined Security Weakness
launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...
Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...
Mac OS X Multiple Vulnerabilities (Security Update 2008-007)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-007 applied. This security update contains fixes for the following products : - Apache - Certificates - ClamAV - ColorSync - CUPS - Finder - launchd - libxslt - MySQL Server - Networking - PH...
Apple Max OS X应用防火墙Launchd绕过安全限制漏洞
BUGTRAQ ID: 26459 CVECAN ID: CVE-2007-4704 Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的应用防火墙设置存在漏洞，可能由于错误的安全认识导致非授权网络访问。 在更改Mac OS X的应用防火墙设置时，重启系统之前launchd所启动的进程不会受影响，但用户可能以为更改应立即生效，这可能会造成错误的安全认知，将系统暴露于某些网络访问。 Apple Mac OS X 10.5 Apple MacOS X Server 10.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Design/Logic Flaw
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...
CVE-2007-4704
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...
CVE-2007-4704
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...
CVE-2007-4704: Undefined Security Weakness
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions...
Directory traversal
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...
CVE-2007-1222
Vulnerability: Parallels Desktop for Mac before 20070216 allows a guest OS user to affect the host by exposing the entire host filesystem via the .psf share. Root cause: the Drag and Drop mechanism shares the host filesystem with the guest, enabling write access to host files. Impact: local guest...
CVE-2007-1222
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...
CVE-2007-1222: Undefined Security Weakness
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...
Mac OS X 10.4 launchd Race Condition Exploit
No description provided by source. / Mac OS X 10.4 launchd race condition exploit intropy intropy at caughq.org / / .sh script to help with the offsets /str0ke !/bin/bash X=1000 Y=3000 I=1 while 1 do ./CAU-launchd /etc/passwd $X if $I -lt 30 then X=$X+$Y I=$I+1 else X=1000 I=1 fi done / include...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...
Apple Mac OSX 10.4.6 (PPC) - launchd Local Format String
Apple Mac OSX 10.4.6 PPC - launchd Local Format String !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the pa...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
Exploit for macOS platform in category local exploits ============================================================== Mac OS X = 10.4.6 launchd Local Format String Exploit ppc ============================================================== !/usr/bin/perl...
Apple Mac OSX 10.4.6 (PPC) - 'launchd' Local Format String
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the hell are you fool. This is just a...
MacOS X launchd formatstring vulnerabilitiy
Format string vulnerability on syslog call...
DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability'
DMA2006-0628a - 'Apple OSX launchd unformatted syslog vulnerability' Author: Kevin Finisterre Vendor: http://www.apple.com/ Product: 'Mac OSX =10.4.6' References: http://www.digitalmunition.com/NonExecutableLovin.txt http://www.digitalmunition.com/dyldstuboverwrites.tar.gz...