Vulnerability Note VU#578886

Apple Mac OS X contains a vulnerability in DiskArbitration when initializing writable removable media

Overview

Apple Mac OS X contains a vulnerability in the way DiskArbitration initializes writable removable media.

I. Description

The DiskArbitration Server in Apple Mac OS X tracks new disks and provides notifications announcing their availability. There is a non-specific vulnerability identified as CAN-2004-0167 in Apple Security Advisory Update 2004-02-23. This vulnerability is related to initialization of writable removable media (i.e., potentially CD-RW and DVD+RW disks).

II. Impact

The complete impact of this vulnerability is not yet known.

III. Solution

Apply Patch

Apple has released a patch to address this vulnerability. For further details, please see the Apple Security Advisory (Security Update 2004-02-23).

Systems Affected

Vendor	Status	Date Updated
Apple Computer Inc.	Vulnerable	25-Feb-2004

References

http://www.apple.com/support/security/security_updates.html
http://secunia.com/advisories/10959/

Credit

This vulnerability was reported by Apple.

This document was written by Damon Morda.

Other Information

Date Public	02/24/2004
Date First Published	02/25/2004 11:49:51 AM
Date Last Updated	03/19/2004
CERT Advisory
CVE Name	CAN-2004-0167
Metric	0.00
Document Revision	13

If you have feedback, comments, or additional information about this vulnerability, please send us email.