PT-2011-2164 · Apple · Macos X

Peter Schwenk · Publicado 2011-03-23 · Atualizado 2011-03-24 · CVE-2011-0183

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7

Description The issue is related to an integer truncation problem in the handling of an unspecified integer field in an NFS RPC packet by Libinfo in Mac OS X. This can be exploited by remote attackers to cause a denial of service, leading to an outage of services such as lockd, statd, mountd, or portmap, via a crafted packet.

Recommendations For Mac OS X versions prior to 10.6.7, update to version 10.6.7 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-0183

Produtos afetados

Macos X

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-0183 · Nota de Segurança
• http://support.apple.com/kb/HT4581 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Aviso do Fabricante