Info

Disclosure

May 03, 2005

Discovery

Unknown

Dates

Exploit

May 04, 2005

Solution

Jun 09, 2005

Description

A local overflow exists in Mac OS X when configured as a VPN server. vpnd fails to validate user-supplied input to the Server_id parameter resulting in a buffer overflow. With a specially crafted request, a malicious user can execute arbitrary code resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.	Mac OS X	10.3
		10.3.1
		10.3.2
		10.3.4
		10.3.3
		10.3.5
		10.3.6
		10.3.7
		10.3.8
		10.3.9

References

Security Tracker: 1013887
Bugtraq ID: 13480
Secunia Advisory ID: 15227 15481
CVE ID: 2005-1343 (see also: NVD)
Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=301528
http://docs.info.apple.com/article.html?artnum=301742
Mail List Post: http://marc.theaimsgroup.com/?l=full-disclosure&m=111521546221945&w=2
Vendor URL: http://www.apple.com/
Other Advisory URL: http://www.idefense.com/application/poi/display?id=240&type=vulnerabilities

Credit

Pieter de Boer - pieteros3.nl -

Direct URL: http://osvdb.org/16085

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Apple Computer, Inc.

Mac OS X

References

Credit