Details of VAR-200701-0036

ID

VAR-200701-0036

CVE

CVE-2007-0318

TITLE

Mac OS X of do_hfs_truncate Service disruption in functions (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2007-001400

DESCRIPTION

The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal. Mac OS X is prone to a denial-of-service vulnerability. This would cause access to an invalid vnode structure during the file move. ---------------------------------------------------------------------- To improve our services to our customers, we have made a number of additions to the Secunia Advisories and have started translating the advisories to German. The improvements will help our customers to get a better understanding of how we reached our conclusions, how it was rated, our thoughts on exploitation, attack vectors, and scenarios. This includes: * Reason for rating * Extended description * Extended solution * Exploit code or links to exploit code * Deep links Read the full description: http://corporate.secunia.com/products/48/?r=l Contact Secunia Sales for more information: http://corporate.secunia.com/how_to_buy/15/?r=l ---------------------------------------------------------------------- TITLE: Mac OS X Mach-O Universal Binary Memory Corruption SECUNIA ADVISORY ID: SA23088 VERIFY ADVISORY: http://secunia.com/advisories/23088/ CRITICAL: Less critical IMPACT: DoS, System access WHERE: Local system OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/ DESCRIPTION: LMH has reported a vulnerability in Mac OS X, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or potentially gain escalated privileges. The vulnerability is caused due to an error in the fatfile_getarch2() function. This can be exploited to cause an integer overflow and may potentially allow execution of arbitrary code with kernel privileges via a specially crafted Mach-O Universal binary. Other versions may also be affected. SOLUTION: Grant only trusted users access to affected systems. PROVIDED AND/OR DISCOVERED BY: LMH ORIGINAL ADVISORY: http://projects.info-pull.com/mokb/MOKB-26-11-2006.html ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2007-0318 // JVNDB: JVNDB-2007-001400 // BID: 86753 // VULHUB: VHN-23680 // PACKETSTORM: 52529

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x	scope:	eq	version:	10.4.8	Trust: 2.4
vendor:	apple	model:	mac os	scope:	eq	version:	x10.4.8	Trust: 0.3

sources: BID: 86753 // JVNDB: JVNDB-2007-001400 // CNNVD: CNNVD-200701-278 // NVD: CVE-2007-0318

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2007-0318
value:	HIGH
Trust: 1.0
NVD:	CVE-2007-0318
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-200701-278
value:	HIGH
Trust: 0.6
VULHUB:	VHN-23680
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2007-0318
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-23680
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-23680 // JVNDB: JVNDB-2007-001400 // CNNVD: CNNVD-200701-278 // NVD: CVE-2007-0318

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2007-0318

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200701-278

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200701-278

CONFIGURATIONS

sources: JVNDB: JVNDB-2007-001400

PATCH

title:

APPLE-SA-2007-03-13

url:

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Trust: 0.8

sources: JVNDB: JVNDB-2007-001400

EXTERNAL IDS

db:	USCERT	id:	TA07-072A	Trust: 2.8
db:	NVD	id:	CVE-2007-0318	Trust: 2.8
db:	SECTRACK	id:	1017759	Trust: 2.0
db:	VUPEN	id:	ADV-2007-0171	Trust: 1.7
db:	VUPEN	id:	ADV-2007-0930	Trust: 1.7
db:	SECUNIA	id:	23742	Trust: 1.7
db:	SECUNIA	id:	24479	Trust: 1.7
db:	OSVDB	id:	32685	Trust: 1.7
db:	JVNDB	id:	JVNDB-2007-001400	Trust: 0.8
db:	APPLE	id:	APPLE-SA-2007-03-13	Trust: 0.6
db:	CERT/CC	id:	TA07-072A	Trust: 0.6
db:	CNNVD	id:	CNNVD-200701-278	Trust: 0.6
db:	BID	id:	86753	Trust: 0.4
db:	VULHUB	id:	VHN-23680	Trust: 0.1
db:	SECUNIA	id:	23088	Trust: 0.1
db:	PACKETSTORM	id:	52529	Trust: 0.1

sources: VULHUB: VHN-23680 // BID: 86753 // JVNDB: JVNDB-2007-001400 // PACKETSTORM: 52529 // CNNVD: CNNVD-200701-278 // NVD: CVE-2007-0318

REFERENCES

url:	http://www.us-cert.gov/cas/techalerts/ta07-072a.html	Trust: 2.8
url:	http://lists.apple.com/archives/security-announce/2007/mar/msg00002.html	Trust: 2.0
url:	http://docs.info.apple.com/article.html?artnum=305214	Trust: 2.0
url:	http://projects.info-pull.com/moab/moab-13-01-2007.html	Trust: 2.0
url:	http://www.securitytracker.com/id?1017759	Trust: 2.0
url:	http://www.osvdb.org/32685	Trust: 1.7
url:	http://secunia.com/advisories/23742	Trust: 1.7
url:	http://secunia.com/advisories/24479	Trust: 1.7
url:	http://www.vupen.com/english/advisories/2007/0171	Trust: 1.1
url:	http://www.vupen.com/english/advisories/2007/0930	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-0318	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-0318	Trust: 0.8
url:	http://www.frsirt.com/english/advisories/2007/0930	Trust: 0.6
url:	http://www.frsirt.com/english/advisories/2007/0171	Trust: 0.6
url:	http://secunia.com/secunia_security_advisories/	Trust: 0.1
url:	http://projects.info-pull.com/mokb/mokb-26-11-2006.html	Trust: 0.1
url:	http://corporate.secunia.com/products/48/?r=l	Trust: 0.1
url:	http://secunia.com/advisories/23088/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/product/96/	Trust: 0.1
url:	http://corporate.secunia.com/how_to_buy/15/?r=l	Trust: 0.1
url:	http://secunia.com/about_secunia_advisories/	Trust: 0.1

sources: VULHUB: VHN-23680 // BID: 86753 // JVNDB: JVNDB-2007-001400 // PACKETSTORM: 52529 // CNNVD: CNNVD-200701-278 // NVD: CVE-2007-0318

CREDITS

Unknown

Trust: 0.3

sources: BID: 86753

SOURCES

db:	VULHUB	id:	VHN-23680
db:	BID	id:	86753
db:	JVNDB	id:	JVNDB-2007-001400
db:	PACKETSTORM	id:	52529
db:	CNNVD	id:	CNNVD-200701-278
db:	NVD	id:	CVE-2007-0318

LAST UPDATE DATE

2024-09-19T21:43:28.076000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-23680	date:	2011-03-08T00:00:00
db:	BID	id:	86753	date:	2007-01-17T00:00:00
db:	JVNDB	id:	JVNDB-2007-001400	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-200701-278	date:	2007-01-18T00:00:00
db:	NVD	id:	CVE-2007-0318	date:	2011-03-08T02:49:15.097

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-23680	date:	2007-01-18T00:00:00
db:	BID	id:	86753	date:	2007-01-17T00:00:00
db:	JVNDB	id:	JVNDB-2007-001400	date:	2012-06-26T00:00:00
db:	PACKETSTORM	id:	52529	date:	2006-11-28T00:52:20
db:	CNNVD	id:	CNNVD-200701-278	date:	2007-01-17T00:00:00
db:	NVD	id:	CVE-2007-0318	date:	2007-01-18T00:28:00