Technical Description

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to disclose sensitive information, bypass security restrictions, cause a denial of service or compromise an affected system. These issues are caused by buffer overflow, range checking, error recovery, memory corruption, signedness, race condition, insecure permissions, input validation, and design errors in Apache, ClamAV, ColorSync, CUPS, Finder, libxslt, MySQL Server, Networking, PHP, Postfix, PSNormalizer, QuickLook, rlogin, Script Editor, Single Sign-On, Tomcat, vim, and Weblog.

For additional information, see : VUPEN/ADV-2007-1804 - VUPEN/ADV-2007-3622 - VUPEN/ADV-2007-4142 - VUPEN/ADV-2008-0013 - VUPEN/ADV-2008-0488 - VUPEN/ADV-2008-0560 - VUPEN/ADV-2008-0570 - VUPEN/ADV-2008-1000 - VUPEN/ADV-2008-1580 - VUPEN/ADV-2008-1725 - VUPEN/ADV-2008-1798 - VUPEN/ADV-2008-1851 - VUPEN/ADV-2008-2146 - VUPEN/ADV-2008-2305 - VUPEN/ADV-2008-2343 - VUPEN/ADV-2008-2484

Affected Products

Mac OS X version 10.4.11 and prior
Mac OS X version 10.5.5 and prior
Mac OS X Server version 10.4.11 and prior
Mac OS X Server version 10.5.5 and prior

Solution

Apple Security Update 2008-007 Server (Universal) :
http://www.apple.com/support/downloads/securityupdate2008007serveruniversal.html

Apple Security Update 2008-007 Server (PPC) :
http://www.apple.com/support/downloads/securityupdate2008007serverppc.html

Apple Security Update 2008-007 Client (PPC) :
http://www.apple.com/support/downloads/securityupdate2008007clientppc.html

Apple Security Update 2008-007 Client (Intel) :
http://www.apple.com/support/downloads/securityupdate2008007clientintel.html

Apple Security Update 2008-007 Server (Leopard) :
http://www.apple.com/support/downloads/securityupdate2008007serverleopard.html

Apple Security Update 2008-007 Client (Leopard) :
http://www.apple.com/support/downloads/securityupdate2008007clientleopard.html

References

http://www.vupen.com/english/advisories/2008/2780
http://support.apple.com/kb/HT3216

Credits

Vulnerabilities reported by the vendor, regenrecht, ZDI, Sergio shadown Alvarez (n.runs AG), Anthony de Almeida Lopes (Outpost24 AB), Chris Evans (Google Security Team), Pelle Johansson and Ralf Meyer.

ChangeLog

2008-10-10 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.