var-200904-0341
Vulnerability from variot
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls. Apple Mac OS X is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. The following are vulnerable; other versions may also be affected. Mac OS X 10.4.8 through 10.4.11 Mac OS X 10.5.0 through 10.5.6.
I.
II. Impact
The impact of these vulnerabilities vary. Potential consequences include arbitrary code execution, sensitive information disclosure, denial of service, or privilege escalation.
III. These and other updates are available via Software Update or via Apple Downloads.
IV. Please send email to cert@cert.org with "TA09-218A Feedback VU#426517" in the subject.
For instructions on subscribing to or unsubscribing from this mailing list, visit http://www.us-cert.gov/cas/signup.html.
Produced 2009 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
Revision History
August 06, 2009: Initial release
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBSnsainIHljM+H4irAQLe2wgAg9ZJq3PGtU+CYHa6+n9Gli9l/NeIXQBb JhKvrXwFYp1uCCs5bVlZ/80Wuq6BJgkv1kojnV6zhqZA7VkPQEhjGofvcUs9MsO8 jXQ6JPdZRd6jWmB4pFHPAD5NOpBV2fJN+JQQuep9xwlap/hITfZfj24+nVFciwXo PdsptiEvpPcfsdan5ScQB+36MC4fRixUAgV+oWHDTgZJEaO1J2/5QiMK7+jWanXH 3jD6FIVdbJQcUmMDGle7RvURSuiX4jFq3D+lweDCtLwX576qx9m6QRbvnxaX8bfU HFcStLJRmi2kFEMiqga83lIyhSB1g1t+rWy5MBH+xml0MSYO7V7z6w== =A6S1 -----END PGP SIGNATURE----- . ----------------------------------------------------------------------
Secunia is pleased to announce the release of the annual Secunia report for 2008.
3) An error in the "sysctl()" interface can be exploited to cause a DoS via " CTL_VFS" sysctl() calls.
SOLUTION: Grant only trusted users access and restrict network access to affected systems. ----------------------------------------------------------------------
Do you have VARM strategy implemented?
(Vulnerability Assessment Remediation Management)
If not, then implement it through the most reliable vulnerability intelligence source on the market.
Implement it through Secunia.
For more information visit: http://secunia.com/advisories/business_solutions/
Alternatively request a call from a Secunia representative today to discuss how we can help you with our capabilities contact us at: sales@secunia.com
TITLE: Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA36096
VERIFY ADVISORY: http://secunia.com/advisories/36096/
DESCRIPTION: Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.
1) An error in bzip2 can be exploited to terminate an application using the library via a specially crafted archive.
For more information: SA29410
2) An error in CFNetwork can be exploited by a malicious website to control the URL displayed in a certificate warning when Safari follows a redirect from a trusted website.
3) An error when processing ColorSync profiles embedded in a specially crafted image can be exploited to cause a heap-based buffer overflow and potentially execute arbitrary code.
4) An error when handling unsafe content types can be exploited to execute a malicious JavaScript payload when a specially crafted file is manually opened.
5) An error when processing four-finger Multi-Touch gestures can be exploited by a person with physical access to a locked system to manage applications or use Expose.
NOTE: This vulnerability only affects system having a Multi-Touch trackpad.
6) An error when processing Canon RAW images can be exploited to cause a stack-based buffer overflow and potentially execute arbitrary code.
7) An error in ImageIO when processing OpenEXR images can be exploited to cause a heap-based buffer overflow and potentially execute arbitrary code.
8) Multiple errors in ImageIO when processing OpenEXR images can be exploited to corrupt memory and potentially execute arbitrary code.
For more information: SA36030
9) A boundary error in ImageIO when processing EXIF metadata can be exploited to cause a buffer overflow and potentially execute arbitrary code via a specially crafted image.
10) An error in ImageIO when processing PNG images can be exploited to dereference an uninitialised pointer and potentially execute arbitrary code.
11) An error in the "fcntl()" kernel implementation can be exploited to corrupt kernel memory and execute arbitrary code with system privileges via e.g. a specially crafted TIOCGWINSZ "fnctl()" call.
12) An error in launchd when servicing via inetd can be exploited to cause a service hang by opening an overly large number of connections.
13) A format string error in Login Window when handling application names can be exploited to potentially execute arbitrary code.
14) The MobileMe preference pane fails to properly delete all credentials when signing out. This can be exploited to access previously signed in systems from the same local user account.
16) A synchronization error when sharing file descriptors over local sockets can be exploited to cause an unexpected system shutdown.
17) A boundary error in the PCRE library used by XQuery can be exploited to cause a buffer overflow and potentially execute arbitrary code.
For more information: SA28923
SOLUTION: Update to Mac OS X v10.5.8 or apply Security Update 2009-003.
Security Update 2009-003 (Tiger Intel): http://support.apple.com/downloads/DL872/en_US/SecUpd2009-003Intel.dmg
Security Update 2009-003 (Server Tiger Universal): http://support.apple.com/downloads/DL869/en_US/SecUpdSrvr2009-003Univ.dmg
Security Update 2009-003 (Server Tiger PPC): http://support.apple.com/downloads/DL870/en_US/SecUpdSrvr2009-003PPC.dmg
Security Update 2009-003 (Tiger PPC): http://support.apple.com/downloads/DL871/en_US/SecUpd2009-003PPC.dmg
Mac OS X Server 10.5.8 Update: http://support.apple.com/downloads/DL867/en_US/MacOSXServerUpd10.5.8.dmg
Mac OS X Server 10.5.8 Combo Update: http://support.apple.com/downloads/DL868/en_US/MacOSXServerUpdCombo10.5.8.dmg
Mac OS X 10.5.8 Update: http://support.apple.com/downloads/DL865/en_US/MacOSXUpd10.5.8.dmg
Mac OS X 10.5.8 Combo Update: http://support.apple.com/downloads/DL866/en_US/MacOSXUpdCombo10.5.8.dmg
PROVIDED AND/OR DISCOVERED BY: 3) Chris Evans of the Google Security Team 11) Razvan Musaloiu-E. of Johns Hopkins University, HiNRG
The vendor also credits: 2) Kevin Day of Your.Org and Jason Mueller of Indiana University 4) Brian Mastenbrook, and Clint Ruoho of Laconic Security 6) Chris Ries of Carnegie Mellon University Computing Services 7) Lurene Grenier of Sourcefire VRT, and Chris Ries of Carnegie Mellon University Computing Services 10) Tavis Ormandy of the Google Security Team 13) Alfredo Pesoli of 0xcafebabe.it 15) Ilja van Sprundel from IOActive 16) Bennet Yee of Google Inc.
CHANGELOG: 2009-08-06: Added link to "Original Advisory".
ORIGINAL ADVISORY: Apple: http://support.apple.com/kb/HT3757
Chris Evans: http://scary.beasts.org/security/CESA-2009-011.html
OTHER REFERENCES: SA28923: http://secunia.com/advisories/28923/
SA29410: http://secunia.com/advisories/29410/
SA36030: http://secunia.com/advisories/36030/
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200904-0341",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.11"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.3.7"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.10"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.4.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.3.9"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.7"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.9"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.8"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.7"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.11"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.6"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.5"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.7"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.5"
},
{
"model": "mac os x",
"scope": "lte",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.6"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.9"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.8"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.8"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.10"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.9"
},
{
"model": "mac os x server",
"scope": "lte",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.6"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.6"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.6"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.6"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.5"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.5"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.7"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.0"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.6"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.6"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.4.4"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.2"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.7"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.0.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.2.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.3.3"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 1.0,
"vendor": "apple",
"version": "10.5.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.5 to v10.5.7"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.5 to v10.5.7"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.7"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.6"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.5"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.4"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.3"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.2"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.1"
},
{
"model": "mac os server",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.7"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.6"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.5"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.4"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.3"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.2"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.1"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5"
},
{
"model": "mac os server",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.8"
},
{
"model": "mac os",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "x10.5.8"
}
],
"sources": [
{
"db": "BID",
"id": "34203"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:apple:mac_os_x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:apple:mac_os_x_server",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "mu-b",
"sources": [
{
"db": "BID",
"id": "34203"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
}
],
"trust": 0.9
},
"cve": "CVE-2009-1235",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CVE-2009-1235",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "VHN-38681",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2009-1235",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2009-1235",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200904-047",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-38681",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls. Apple Mac OS X is prone to a local privilege-escalation vulnerability. \nA local attacker can exploit this issue to execute arbitrary code with elevated privileges. \nThe following are vulnerable; other versions may also be affected. \nMac OS X 10.4.8 through 10.4.11\nMac OS X 10.5.0 through 10.5.6. \n\n\nI. \n\n\nII. Impact\n\n The impact of these vulnerabilities vary. Potential consequences\n include arbitrary code execution, sensitive information disclosure,\n denial of service, or privilege escalation. \n\n\nIII. These\n and other updates are available via Software Update or via Apple\n Downloads. \n\n\nIV. Please send\n email to \u003ccert@cert.org\u003e with \"TA09-218A Feedback VU#426517\" in\n the subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit \u003chttp://www.us-cert.gov/cas/signup.html\u003e. \n ____________________________________________________________________\n\n Produced 2009 by US-CERT, a government organization. \n\n Terms of use:\n\n \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\nRevision History\n \n August 06, 2009: Initial release\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.5 (GNU/Linux)\n\niQEVAwUBSnsainIHljM+H4irAQLe2wgAg9ZJq3PGtU+CYHa6+n9Gli9l/NeIXQBb\nJhKvrXwFYp1uCCs5bVlZ/80Wuq6BJgkv1kojnV6zhqZA7VkPQEhjGofvcUs9MsO8\njXQ6JPdZRd6jWmB4pFHPAD5NOpBV2fJN+JQQuep9xwlap/hITfZfj24+nVFciwXo\nPdsptiEvpPcfsdan5ScQB+36MC4fRixUAgV+oWHDTgZJEaO1J2/5QiMK7+jWanXH\n3jD6FIVdbJQcUmMDGle7RvURSuiX4jFq3D+lweDCtLwX576qx9m6QRbvnxaX8bfU\nHFcStLJRmi2kFEMiqga83lIyhSB1g1t+rWy5MBH+xml0MSYO7V7z6w==\n=A6S1\n-----END PGP SIGNATURE-----\n. ----------------------------------------------------------------------\n\nSecunia is pleased to announce the release of the annual Secunia\nreport for 2008. \n\n3) An error in the \"sysctl()\" interface can be exploited to cause a\nDoS via \" CTL_VFS\" sysctl() calls. \n\nSOLUTION:\nGrant only trusted users access and restrict network access to\naffected systems. ----------------------------------------------------------------------\n\nDo you have VARM strategy implemented?\n\n(Vulnerability Assessment Remediation Management) \n\nIf not, then implement it through the most reliable vulnerability\nintelligence source on the market. \n\nImplement it through Secunia. \n\nFor more information visit:\nhttp://secunia.com/advisories/business_solutions/\n\nAlternatively request a call from a Secunia representative today to\ndiscuss how we can help you with our capabilities contact us at:\nsales@secunia.com\n\n----------------------------------------------------------------------\n\nTITLE:\nApple Mac OS X Security Update Fixes Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA36096\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/36096/\n\nDESCRIPTION:\nApple has issued a security update for Mac OS X, which fixes multiple\nvulnerabilities. \n\n1) An error in bzip2 can be exploited to terminate an application\nusing the library via a specially crafted archive. \n\nFor more information:\nSA29410\n\n2) An error in CFNetwork can be exploited by a malicious website to\ncontrol the URL displayed in a certificate warning when Safari\nfollows a redirect from a trusted website. \n\n3) An error when processing ColorSync profiles embedded in a\nspecially crafted image can be exploited to cause a heap-based buffer\noverflow and potentially execute arbitrary code. \n\n4) An error when handling unsafe content types can be exploited to\nexecute a malicious JavaScript payload when a specially crafted file\nis manually opened. \n\n5) An error when processing four-finger Multi-Touch gestures can be\nexploited by a person with physical access to a locked system to\nmanage applications or use Expose. \n\nNOTE: This vulnerability only affects system having a Multi-Touch\ntrackpad. \n\n6) An error when processing Canon RAW images can be exploited to\ncause a stack-based buffer overflow and potentially execute arbitrary\ncode. \n\n7) An error in ImageIO when processing OpenEXR images can be\nexploited to cause a heap-based buffer overflow and potentially\nexecute arbitrary code. \n\n8) Multiple errors in ImageIO when processing OpenEXR images can be\nexploited to corrupt memory and potentially execute arbitrary code. \n\nFor more information:\nSA36030\n\n9) A boundary error in ImageIO when processing EXIF metadata can be\nexploited to cause a buffer overflow and potentially execute\narbitrary code via a specially crafted image. \n\n10) An error in ImageIO when processing PNG images can be exploited\nto dereference an uninitialised pointer and potentially execute\narbitrary code. \n\n11) An error in the \"fcntl()\" kernel implementation can be exploited\nto corrupt kernel memory and execute arbitrary code with system\nprivileges via e.g. a specially crafted TIOCGWINSZ \"fnctl()\" call. \n\n12) An error in launchd when servicing via inetd can be exploited to\ncause a service hang by opening an overly large number of\nconnections. \n\n13) A format string error in Login Window when handling application\nnames can be exploited to potentially execute arbitrary code. \n\n14) The MobileMe preference pane fails to properly delete all\ncredentials when signing out. This can be exploited to access\npreviously signed in systems from the same local user account. \n\n16) A synchronization error when sharing file descriptors over local\nsockets can be exploited to cause an unexpected system shutdown. \n\n17) A boundary error in the PCRE library used by XQuery can be\nexploited to cause a buffer overflow and potentially execute\narbitrary code. \n\nFor more information:\nSA28923\n\nSOLUTION:\nUpdate to Mac OS X v10.5.8 or apply Security Update 2009-003. \n\nSecurity Update 2009-003 (Tiger Intel):\nhttp://support.apple.com/downloads/DL872/en_US/SecUpd2009-003Intel.dmg\n\nSecurity Update 2009-003 (Server Tiger Universal):\nhttp://support.apple.com/downloads/DL869/en_US/SecUpdSrvr2009-003Univ.dmg\n\nSecurity Update 2009-003 (Server Tiger PPC):\nhttp://support.apple.com/downloads/DL870/en_US/SecUpdSrvr2009-003PPC.dmg\n\nSecurity Update 2009-003 (Tiger PPC):\nhttp://support.apple.com/downloads/DL871/en_US/SecUpd2009-003PPC.dmg\n\nMac OS X Server 10.5.8 Update:\nhttp://support.apple.com/downloads/DL867/en_US/MacOSXServerUpd10.5.8.dmg\n\nMac OS X Server 10.5.8 Combo Update:\nhttp://support.apple.com/downloads/DL868/en_US/MacOSXServerUpdCombo10.5.8.dmg\n\nMac OS X 10.5.8 Update:\nhttp://support.apple.com/downloads/DL865/en_US/MacOSXUpd10.5.8.dmg\n\nMac OS X 10.5.8 Combo Update:\nhttp://support.apple.com/downloads/DL866/en_US/MacOSXUpdCombo10.5.8.dmg\n\nPROVIDED AND/OR DISCOVERED BY:\n3) Chris Evans of the Google Security Team\n11) Razvan Musaloiu-E. of Johns Hopkins University, HiNRG\n\nThe vendor also credits:\n2) Kevin Day of Your.Org and Jason Mueller of Indiana University\n4) Brian Mastenbrook, and Clint Ruoho of Laconic Security\n6) Chris Ries of Carnegie Mellon University Computing Services\n7) Lurene Grenier of Sourcefire VRT, and Chris Ries of Carnegie\nMellon University Computing Services\n10) Tavis Ormandy of the Google Security Team\n13) Alfredo Pesoli of 0xcafebabe.it\n15) Ilja van Sprundel from IOActive\n16) Bennet Yee of Google Inc. \n\nCHANGELOG:\n2009-08-06: Added link to \"Original Advisory\". \n\nORIGINAL ADVISORY:\nApple:\nhttp://support.apple.com/kb/HT3757\n\nChris Evans:\nhttp://scary.beasts.org/security/CESA-2009-011.html\n\nOTHER REFERENCES:\nSA28923:\nhttp://secunia.com/advisories/28923/\n\nSA29410:\nhttp://secunia.com/advisories/29410/\n\nSA36030:\nhttp://secunia.com/advisories/36030/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1235"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "BID",
"id": "34203"
},
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "PACKETSTORM",
"id": "80118"
},
{
"db": "PACKETSTORM",
"id": "76623"
},
{
"db": "PACKETSTORM",
"id": "80117"
}
],
"trust": 2.25
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-38681",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-1235",
"trust": 2.8
},
{
"db": "USCERT",
"id": "TA09-218A",
"trust": 2.6
},
{
"db": "BID",
"id": "34203",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "34424",
"trust": 1.9
},
{
"db": "SECUNIA",
"id": "36096",
"trust": 1.8
},
{
"db": "EXPLOIT-DB",
"id": "8266",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1022671",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2009-2172",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2009-0822",
"trust": 1.7
},
{
"db": "USCERT",
"id": "SA09-218A",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047",
"trust": 0.7
},
{
"db": "APPLE",
"id": "APPLE-SA-2009-08-05-1",
"trust": 0.6
},
{
"db": "MILW0RM",
"id": "8266",
"trust": 0.6
},
{
"db": "CERT/CC",
"id": "TA09-218A",
"trust": 0.6
},
{
"db": "SEEBUG",
"id": "SSVID-66385",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-38681",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "80118",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "8262",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "8265",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "8263",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "8264",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "76623",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "80117",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "BID",
"id": "34203"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "PACKETSTORM",
"id": "80118"
},
{
"db": "PACKETSTORM",
"id": "76623"
},
{
"db": "PACKETSTORM",
"id": "80117"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"id": "VAR-200904-0341",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T20:04:07.156000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "HT3757",
"trust": 0.8,
"url": "http://support.apple.com/kb/HT3757"
},
{
"title": "HT3757",
"trust": 0.8,
"url": "http://support.apple.com/kb/HT3757?viewlocale=ja_JP"
},
{
"title": "TA09-218A",
"trust": 0.8,
"url": "http://software.fujitsu.com/jp/security/vulnerabilities/ta09-218a.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.us-cert.gov/cas/techalerts/ta09-218a.html"
},
{
"trust": 1.8,
"url": "http://support.apple.com/kb/ht3757"
},
{
"trust": 1.7,
"url": "http://lists.apple.com/archives/security-announce/2009/aug/msg00001.html"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/34203"
},
{
"trust": 1.7,
"url": "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c"
},
{
"trust": 1.7,
"url": "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh"
},
{
"trust": 1.7,
"url": "http://www.informationweek.com/news/hardware/mac/showarticle.jhtml?articleid=216401181"
},
{
"trust": 1.7,
"url": "http://www.securitytracker.com/id?1022671"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/34424"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/36096"
},
{
"trust": 1.7,
"url": "http://www.vupen.com/english/advisories/2009/0822"
},
{
"trust": 1.7,
"url": "http://www.vupen.com/english/advisories/2009/2172"
},
{
"trust": 1.1,
"url": "https://www.exploit-db.com/exploits/8266"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1235"
},
{
"trust": 0.8,
"url": "https://jvn.jp/cert/jvnta09-218a/index.html"
},
{
"trust": 0.8,
"url": "http://jvn.jp/tr/jvntr-2009-20"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-1235"
},
{
"trust": 0.8,
"url": "http://www.us-cert.gov/cas/alerts/sa09-218a.html"
},
{
"trust": 0.6,
"url": "http://www.milw0rm.com/exploits/8266"
},
{
"trust": 0.3,
"url": "http://www.apple.com/macosx/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "https://support.apple.com/kb/ht1338?viewlocale=en_us\u003e"
},
{
"trust": 0.1,
"url": "http://support.apple.com/kb/ht3757\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/legal.html\u003e"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/signup.html\u003e."
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/techalerts/ta09-218a.html\u003e"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/8266"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/34424/"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/8264"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/8263"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/8262"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/8265"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/try_vi/request_2008_report/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/36030/"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl868/en_us/macosxserverupdcombo10.5.8.dmg"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/29410/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/36096/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl869/en_us/secupdsrvr2009-003univ.dmg"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl870/en_us/secupdsrvr2009-003ppc.dmg"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl872/en_us/secupd2009-003intel.dmg"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl867/en_us/macosxserverupd10.5.8.dmg"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl866/en_us/macosxupdcombo10.5.8.dmg"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl865/en_us/macosxupd10.5.8.dmg"
},
{
"trust": 0.1,
"url": "http://scary.beasts.org/security/cesa-2009-011.html"
},
{
"trust": 0.1,
"url": "http://support.apple.com/downloads/dl871/en_us/secupd2009-003ppc.dmg"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/28923/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "BID",
"id": "34203"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "PACKETSTORM",
"id": "80118"
},
{
"db": "PACKETSTORM",
"id": "76623"
},
{
"db": "PACKETSTORM",
"id": "80117"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-38681"
},
{
"db": "BID",
"id": "34203"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"db": "PACKETSTORM",
"id": "80118"
},
{
"db": "PACKETSTORM",
"id": "76623"
},
{
"db": "PACKETSTORM",
"id": "80117"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-04-02T00:00:00",
"db": "VULHUB",
"id": "VHN-38681"
},
{
"date": "2009-03-23T00:00:00",
"db": "BID",
"id": "34203"
},
{
"date": "2009-06-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"date": "2009-08-07T15:36:13",
"db": "PACKETSTORM",
"id": "80118"
},
{
"date": "2009-04-14T15:11:25",
"db": "PACKETSTORM",
"id": "76623"
},
{
"date": "2009-08-07T07:36:28",
"db": "PACKETSTORM",
"id": "80117"
},
{
"date": "2009-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"date": "2009-04-02T17:30:00.327000",
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-29T00:00:00",
"db": "VULHUB",
"id": "VHN-38681"
},
{
"date": "2009-08-21T15:54:00",
"db": "BID",
"id": "34203"
},
{
"date": "2009-09-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-001528"
},
{
"date": "2009-04-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200904-047"
},
{
"date": "2024-11-21T01:01:58.497000",
"db": "NVD",
"id": "CVE-2009-1235"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "34203"
},
{
"db": "PACKETSTORM",
"id": "76623"
},
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
}
],
"trust": 1.0
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Apple Mac OS X of XNU Kernel memory overwrite and privilege escalation vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-001528"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200904-047"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.