PT-2009-2847 · Apple+1 · Macos X+1

Published 2009-05-13 · Updated 2016-08-23 · CVE-2009-0158

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4.11 through 10.5.6 Apple Mac OS X version 10.5 before 10.5.7 can be simplified to the above range

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a long hostname for a telnet server.

Recommendations For Apple Mac OS X versions 10.4.11 through 10.5.6, update to version 10.5.7 or later to resolve the issue.

Exploit

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0158

HPSBUX02859

Affected Products

Hp-Ux

Macos X

References · 26

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ntp/ntpd_reserved_dos.rb · Exploit
• https://bdu.fstec.ru/vul/2015-02159 · Security Note
• https://bdu.fstec.ru/vul/2015-06448 · Security Note
• https://bdu.fstec.ru/vul/2015-02162 · Security Note
• https://bdu.fstec.ru/vul/2015-06447 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159 · Security Note
• https://bdu.fstec.ru/vul/2015-09410 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0158 · Security Note
• http://marc.info/?l=bugtraq&m=136482797910018&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02160 · Security Note
• https://bdu.fstec.ru/vul/2015-07451 · Security Note
• https://bdu.fstec.ru/vul/2015-09376 · Security Note
• https://bdu.fstec.ru/vul/2015-02161 · Security Note
• https://bdu.fstec.ru/vul/2015-08550 · Security Note
• https://bdu.fstec.ru/vul/2015-08487 · Security Note