Technical Description

A vulnerability has been identified in Apple Mac OS X, which could be exploited by remote attackers to take complete control of an affected system. This flaw is due to memory corruption errors in the Apple Airport driver (Orinoco-based Airport cards) when handling malformed frames, which could be exploited by attackers to execute arbitrary commands on a system with a vulnerable driver running in active scanning mode.

Affected Products

Apple Mac OS X version 10.3.9 and prior
Apple Mac OS X Server version 10.3.9 and prior
Apple Mac OS X version 10.4.8 and prior
Apple Mac OS X Server version 10.4.8 and prior

Solution

Security Upgrade 2006-007 (10.3.9 Client) :
http://www.apple.com/support/downloads/securityupdate20060071039client.html

Security Upgrade 2006-007 (10.3.9 Server) :
http://www.apple.com/support/downloads/securityupdate20060071039server.html

Security Upgrade 2006-007 (10.4.8 Client Intel) :
http://www.apple.com/support/downloads/securityupdate20060071048clientintel.html

Security Upgrade 2006-007 (10.4.8 Client PPC) :
http://www.apple.com/support/downloads/securityupdate20060071048clientppc.html

Security Upgrade 2006-007 (10.4.8 Server PPC) :
http://www.apple.com/support/downloads/securityupdate20060071048serverppc.html

Security Upgrade 2006-007 (10.4.8 Server Universal) :
http://www.apple.com/support/downloads/securityupdate20060071048serveruniversal.html

References

http://www.vupen.com/english/advisories/2006/4313
http://projects.info-pull.com/mokb/MOKB-01-11-2006.html
http://docs.info.apple.com/article.html?artnum=304829

Credits

Vulnerability reported by H D Moore

ChangeLog

2006-11-02 : Initial release
2006-11-28 : Updated Solution

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.