Info

Disclosure

Nov 09, 2006

Discovery

Unknown

Dates

Exploit

Nov 11, 2006

Solution

Unknown

Description

Mac OS X contains a flaw that may allow a local denial of service. The issue is triggered when a call to fpathcong() occurs with an unsupported file type, and will result in a system panic causing a loss of availability.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Apple Computer, Inc.

Mac OS X

10.4.8

References

CVE ID: 2006-5836 (see also: NVD)
Bugtraq ID: 20982
Secunia Advisory ID: 22808
ISS X-Force ID: 30152
Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=305214
Generic Exploit URL: http://projects.info-pull.com/mokb/MOKB-09-11-2006.html
Other Advisory URL: http://projects.info-pull.com/mokb/MOKB-09-11-2006.html
Keyword: Month of Kernel Bugs (MoKB)

Credit

Ilja van Sprundel -

Direct URL: http://osvdb.org/30216