Vulnerability Note VU#578886

Apple Mac OS X contains a vulnerability in DiskArbitration when initializing writable removable media

Overview

Apple Mac OS X contains a vulnerability in the way DiskArbitration initializes writable removable media.

I. Description

The DiskArbitration Server in Apple Mac OS X tracks new disks and provides notifications announcing their availability. There is a non-specific vulnerability identified as CAN-2004-0167 in Apple Security Advisory Update 2004-02-23. This vulnerability is related to initialization of writable removable media (i.e., potentially CD-RW and DVD+RW disks).

II. Impact

The complete impact of this vulnerability is not yet known.

III. Solution

Apply Patch

Apple has released a patch to address this vulnerability. For further details, please see the Apple Security Advisory (Security Update 2004-02-23).

Systems Affected

Vendor	Status	Date Notified	Date Updated
Apple Computer Inc.	Vulnerable	25-Feb-2004

References

http://www.apple.com/support/security/security_updates.html
http://secunia.com/advisories/10959/

Credit

This vulnerability was reported by Apple.

This document was written by Damon Morda.

Other Information

Date Public:	2004-02-24
Date First Published:	2004-02-25
Date Last Updated:	2004-03-19
CERT Advisory:
CVE-ID(s):	CAN-2004-0167
NVD-ID(s):	CAN-2004-0167
US-CERT Technical Alerts:
Metric:	0.00
Document Revision:	13

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader