SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips
 

Vulnerability Note VU#765096

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview

A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service.

I. Description

The fpathconf() system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a file descriptor. The version of fpathconf() provided with the Apple Mac OS X kernel (XNU) is programmed to panic when it is passed file descriptors associated with types it cannot otherwise handle, such as semaphore descriptors returned by the sem_open() system call for named semaphores.

II. Impact

An authenticated local attacker could cause the affected system to crash due to a kernel panic. This condition results in a denial of service.

III. Solution

Apply a patch from the vendor

Apple has published Mac OS X 10.4.9 for Mac OS X 10.4 (Tiger) systems and Security Update 2007-003 for Mac OS X 10.3 (Panther) systems in response to this issue. Users are encouraged to review Apple Support Article ID 305214 and apply the appropriate update for their system.

Systems Affected

VendorStatusDate NotifiedDate Updated
Apple Computer, Inc.Vulnerable13-Mar-2007

References


http://projects.info-pull.com/mokb/MOKB-09-11-2006.html
http://secunia.com/advisories/22808/
http://docs.info.apple.com/article.html?artnum=305214
http://secunia.com/advisories/24479/
http://securitytracker.com/alerts/2007/Mar/1017751.html
http://www.securityfocus.com/bid/20982

Credit

This vulnerability was published by LMH as part of the Month of Kernel Bugs project. Ilja van Sprundel is credited with the discovery of this issue.

This document was written by Chad R Dougherty.

Other Information

Date Public:2006-11-09
Date First Published:2007-03-13
Date Last Updated:2007-07-20
CERT Advisory: 
CVE-ID(s):CVE-2006-5836
NVD-ID(s):CVE-2006-5836
US-CERT Technical Alerts: 
Metric:5.17
Document Revision:10

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2007 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader