|
Apple Mac OS X Multiple Vulnerabilities
Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Apache htdigest is prone to a buffer overflow that could be leveraged through a CGI application. Appkit is prone to an integer overflow when handling TIFF files. Appkit is also prone to a denial of service due to an unhandled exception in NXSeek(). AppleScript is prone to a code obfuscation issue. The Bluetooth file exchange service may allow downloaded files to be disclosed. Bluetooth is also prone to a directory traversal vulnerability. chfn/chpass/chsh programs could allow privilege escalation. Finder handles .DS_Store files in an insecure manner that could allow local attackers to overwrite files and allow privilege escalation. The Foundation framework is prone to a buffer overflow in environmental variables. The Help Viewer is prone to a cross-zone scripting vulnerability. LDAP allows passwords to initially be stored in plain text when using an LDAP server not running on OS X. The XFree86 libXpm library is prone to a stack overflow when parsing malformed image files. The XFree86 libXpm library also contains multiple routines that are prone to integer overflows. lukemftpd could allow authenticated users to escape chroot. The NetInfo Setup Tool (NeST) is prone to a buffer overflow. When the HTTP proxy service is enabled through Server Admin, it is also available for users outside the local network. Sudo versions prior to 1.6.8p2 do not adequately sanitize their environments. Terminal allows malicious content to inject data when it is displayed. Terminal also allows escape characters embedded in x-man-path URI's to insert commands into a Terminal session. vpnd is prone to a buffer overflow that could allow a local user to obtain root privileges. |
|
|
Privacy Statement |
