PT-2011-2164 · Apple · Macos X

Peter Schwenk · Published 2011-03-23 · Updated 2011-03-24 · CVE-2011-0183

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7

Description The issue is related to an integer truncation problem in the handling of an unspecified integer field in an NFS RPC packet by Libinfo in Mac OS X. This can be exploited by remote attackers to cause a denial of service, leading to an outage of services such as lockd, statd, mountd, or portmap, via a crafted packet.

Recommendations For Mac OS X versions prior to 10.6.7, update to version 10.6.7 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-0183

Affected Products

Macos X

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-0183 · Security Note
• http://support.apple.com/kb/HT4581 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Vendor Advisory