Yosemite Backup 'DtbClsLogin()' Remote Buffer Overflow Vulnerability

Yosemite Backup 'DtbClsLogin()' Remote Buffer Overflow Vulnerability

Yosemite Backup is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application or cause a denial-of-service condition.

NOTE: Reports indicate that successful exploits allow remote code execution on Linux systems and denial of service on Windows systems.

Yosemite Backup 8.70 is vulnerable; other versions may also be affected.