cvelistv5 - cve-2005-2335

CVE-2005-2335 (GCVE-0-2005-2335)

Vulnerability from cvelistv5

Published

2005-07-27 04:00

Modified

2024-08-07 22:22

Severity ?

CWE

Summary

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.

References

URL

Tags

	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://www.securityfocus.com/bid/14349	vdb-entry, x_refsource_BID
	http://www.novell.com/linux/security/advisories/2005_18_sr.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html	x_refsource_MISC
	http://www.vupen.com/english/advisories/2005/1171	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21253	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt	x_refsource_CONFIRM
	http://www.osvdb.org/18174	vdb-entry, x_refsource_OSVDB
	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038	vdb-entry, signature, x_refsource_OVAL
	http://developer.berlios.de/project/shownotes.php?release_id=6617	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/441856/100/200/threaded	mailing-list, x_refsource_BUGTRAQ
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2005/dsa-774	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2005-640.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/archive/1/435197/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/16176	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:22:48.888Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "14349",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/14349"
          },
          {
            "name": "SUSE-SR:2005:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html"
          },
          {
            "name": "ADV-2005-1171",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1171"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt"
          },
          {
            "name": "18174",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/18174"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:1124",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124"
          },
          {
            "name": "FEDORA-2005-613",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html"
          },
          {
            "name": "oval:org.mitre.oval:def:1038",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=6617"
          },
          {
            "name": "20060801 DMA[2006-0801a] - \u0027Apple OSX fetchmail buffer overflow\u0027",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/441856/100/200/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:8833",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833"
          },
          {
            "name": "DSA-774",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2005/dsa-774"
          },
          {
            "name": "RHSA-2005:640",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-640.html"
          },
          {
            "name": "FEDORA-2005-614",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html"
          },
          {
            "name": "20060526 rPSA-2006-0084-1 fetchmail",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/435197/100/0/threaded"
          },
          {
            "name": "16176",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/16176"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-07-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "14349",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/14349"
        },
        {
          "name": "SUSE-SR:2005:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html"
        },
        {
          "name": "ADV-2005-1171",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/1171"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt"
        },
        {
          "name": "18174",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/18174"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:1124",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124"
        },
        {
          "name": "FEDORA-2005-613",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html"
        },
        {
          "name": "oval:org.mitre.oval:def:1038",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=6617"
        },
        {
          "name": "20060801 DMA[2006-0801a] - \u0027Apple OSX fetchmail buffer overflow\u0027",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/441856/100/200/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:8833",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833"
        },
        {
          "name": "DSA-774",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2005/dsa-774"
        },
        {
          "name": "RHSA-2005:640",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-640.html"
        },
        {
          "name": "FEDORA-2005-614",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html"
        },
        {
          "name": "20060526 rPSA-2006-0084-1 fetchmail",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/435197/100/0/threaded"
        },
        {
          "name": "16176",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/16176"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-2335",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "14349",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/14349"
            },
            {
              "name": "SUSE-SR:2005:018",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html",
              "refsource": "MISC",
              "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html"
            },
            {
              "name": "ADV-2005-1171",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/1171"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt",
              "refsource": "CONFIRM",
              "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt"
            },
            {
              "name": "18174",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/18174"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:1124",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124"
            },
            {
              "name": "FEDORA-2005-613",
              "refsource": "FEDORA",
              "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html"
            },
            {
              "name": "oval:org.mitre.oval:def:1038",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=6617",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=6617"
            },
            {
              "name": "20060801 DMA[2006-0801a] - \u0027Apple OSX fetchmail buffer overflow\u0027",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/441856/100/200/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:8833",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833"
            },
            {
              "name": "DSA-774",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2005/dsa-774"
            },
            {
              "name": "RHSA-2005:640",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-640.html"
            },
            {
              "name": "FEDORA-2005-614",
              "refsource": "FEDORA",
              "url": "http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html"
            },
            {
              "name": "20060526 rPSA-2006-0084-1 fetchmail",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/435197/100/0/threaded"
            },
            {
              "name": "16176",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/16176"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-2335",
    "datePublished": "2005-07-27T04:00:00.000Z",
    "dateReserved": "2005-07-21T00:00:00.000Z",
    "dateUpdated": "2024-08-07T22:22:48.888Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2006-AVI-317

Vulnerability from certfr_avis

De nombreuses vulnérabilités ont été identifiées dans le systèmes d'exploitation Mac OS X. Elles concernent plusieurs applications et services, notamment DHCP, bluetooth, fetchmail, gunzip, ImageIO, telnet, OpenSSH ou LaunchServices. Les risques sont variés, certains peuvant conduire à l'exécution de code arbitraire à distance.

Description

De nombreuses vulnérabilités ont été identifiées dans le systèmes d'exploitation Mac OS X. Elles concernent plusieurs applications et services. Parmi celles-ci :

DHCP : le service bootpd ne gère pas correctement certaines requêtes, pouvant provoquer un débordement de tampon. Une personne malveillante peut profiter de cette vulnérabilité pour exécuter du code arbitraire à distance, par le biais d'une requête spécialement conçue. Le service bootpd n'est cependant pas activé par défaut sur Mac OS X.
bluetooth : la clé secrète générée automatiquement pour la phase d'association avec d'autres appareils bluetooth n'est pas suffisamment longue. Elle facilite les attaques par recherche exhaustive.
gunzip : il serait possible, localement, de modifier les permissions de fichiers appartenant à d'autres utilisateurs exécutant gunzip.
ImageIO : cette application ne gère pas correctement certaines images de type Radiance ou GIF. L'ouverture d'images malveillantes exploitant ces vulnérabilités peut provoquer un déni de service, ou l'exécution de code arbitraire.
OpenSSH : un utilisateur malveillant peut chercher à se connecter à distance (remote login) sur une machine vulnérable en testant plusieurs identifiants. La répétition de cette opération peut conduire à la découverte de comptes valides sur le serveur et à son mauvais fonctionnement (déni de service).
telnet : au cours de la connexion à un serveur Telnet distant, un utilisateur malveillant peut accéder à plusieurs variables d'environnement confidentielles à l'insu de l'utilisateur qui s'y connecte.

D'autres vulnérabilités touchent dyld (gestion des liens dynamiques pour les bibliothèques), AFP Server (non activé par défaut), Bom (système de fichiers pour l'installation), Image RAW, WebKit et AppKit. Les risques sont variés, certains pouvant conduire à l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Intel	N/A	la version Mac 0S X 10.4.7 (PPC et Intel) ainsi que celles antérieures ;
Intel	N/A	La version Mac 0S X 10.3.9 ainsi que celles antérieures ;
Intel	N/A	la version Mac 0S X 10.4.7 Server (PPC et Intel) ainsi que celles antérieures.
Intel	N/A	la version Mac 0S X 10.3.9 Server ainsi que celles antérieures ;

References

Title

Publication Time

Tags

Bulletin de sécurité Apple du 01/08/2006	None	vendor-advisory
Bulletin de sécurité 2006-004 Apple du 01 août 2006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "la version Mac 0S X 10.4.7 (PPC et Intel) ainsi que celles ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "La version Mac 0S X 10.3.9 ainsi que celles ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "la version Mac 0S X 10.4.7 Server (PPC et Intel) ainsi que celles ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "la version Mac 0S X 10.3.9 Server ainsi que celles ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans le syst\u00e8mes\nd\u0027exploitation Mac OS X. Elles concernent plusieurs applications et\nservices. Parmi celles-ci :\n\n-   DHCP : le service bootpd ne g\u00e8re pas correctement certaines\n    requ\u00eates, pouvant provoquer un d\u00e9bordement de tampon. Une personne\n    malveillante peut profiter de cette vuln\u00e9rabilit\u00e9 pour ex\u00e9cuter du\n    code arbitraire \u00e0 distance, par le biais d\u0027une requ\u00eate sp\u00e9cialement\n    con\u00e7ue. Le service bootpd n\u0027est cependant pas activ\u00e9 par d\u00e9faut sur\n    Mac OS X.\n-   bluetooth : la cl\u00e9 secr\u00e8te g\u00e9n\u00e9r\u00e9e automatiquement pour la phase\n    d\u0027association avec d\u0027autres appareils bluetooth n\u0027est pas\n    suffisamment longue. Elle facilite les attaques par recherche\n    exhaustive.\n-   gunzip : il serait possible, localement, de modifier les permissions\n    de fichiers appartenant \u00e0 d\u0027autres utilisateurs ex\u00e9cutant gunzip.\n-   ImageIO : cette application ne g\u00e8re pas correctement certaines\n    images de type Radiance ou GIF. L\u0027ouverture d\u0027images malveillantes\n    exploitant ces vuln\u00e9rabilit\u00e9s peut provoquer un d\u00e9ni de service, ou\n    l\u0027ex\u00e9cution de code arbitraire.\n-   OpenSSH : un utilisateur malveillant peut chercher \u00e0 se connecter \u00e0\n    distance (remote login) sur une machine vuln\u00e9rable en testant\n    plusieurs identifiants. La r\u00e9p\u00e9tition de cette op\u00e9ration peut\n    conduire \u00e0 la d\u00e9couverte de comptes valides sur le serveur et \u00e0 son\n    mauvais fonctionnement (d\u00e9ni de service).\n-   telnet : au cours de la connexion \u00e0 un serveur Telnet distant, un\n    utilisateur malveillant peut acc\u00e9der \u00e0 plusieurs variables\n    d\u0027environnement confidentielles \u00e0 l\u0027insu de l\u0027utilisateur qui s\u0027y\n    connecte.\n\nD\u0027autres vuln\u00e9rabilit\u00e9s touchent dyld (gestion des liens dynamiques pour\nles biblioth\u00e8ques), AFP Server (non activ\u00e9 par d\u00e9faut), Bom (syst\u00e8me de\nfichiers pour l\u0027installation), Image RAW, WebKit et AppKit. Les risques\nsont vari\u00e9s, certains pouvant conduire \u00e0 l\u0027ex\u00e9cution de code arbitraire\n\u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2005-4348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-4348"
    },
    {
      "name": "CVE-2005-3088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3088"
    },
    {
      "name": "CVE-2006-3465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3465"
    },
    {
      "name": "CVE-2006-1473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-1473"
    },
    {
      "name": "CVE-2006-3497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3497"
    },
    {
      "name": "CVE-2006-3501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3501"
    },
    {
      "name": "CVE-2006-3504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3504"
    },
    {
      "name": "CVE-2005-0488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0488"
    },
    {
      "name": "CVE-2006-0321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0321"
    },
    {
      "name": "CVE-2005-1228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1228"
    },
    {
      "name": "CVE-2006-0392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0392"
    },
    {
      "name": "CVE-2005-0393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0393"
    },
    {
      "name": "CVE-2006-3496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3496"
    },
    {
      "name": "CVE-2006-3503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3503"
    },
    {
      "name": "CVE-2006-0393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0393"
    },
    {
      "name": "CVE-2006-3459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3459"
    },
    {
      "name": "CVE-2005-0988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0988"
    },
    {
      "name": "CVE-2005-2335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2335"
    },
    {
      "name": "CVE-2006-3505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3505"
    },
    {
      "name": "CVE-2006-3502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3502"
    },
    {
      "name": "CVE-2006-3498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3498"
    },
    {
      "name": "CVE-2006-3462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3462"
    },
    {
      "name": "CVE-2006-3499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3499"
    },
    {
      "name": "CVE-2006-3495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3495"
    },
    {
      "name": "CVE-2006-3461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3461"
    },
    {
      "name": "CVE-2006-3500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3500"
    },
    {
      "name": "CVE-2006-1472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-1472"
    }
  ],
  "initial_release_date": "2006-08-02T00:00:00",
  "last_revision_date": "2006-08-02T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 2006-004 Apple du 01 ao\u00fbt 2006 :",
      "url": "http://docs.info.apple.com/article.html?artnum=304063"
    }
  ],
  "reference": "CERTA-2006-AVI-317",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-08-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De nombreuses vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans le syst\u00e8mes\nd\u0027exploitation Mac OS X. Elles concernent plusieurs applications et\nservices, notamment DHCP, bluetooth, fetchmail, gunzip, ImageIO, telnet,\nOpenSSH ou LaunchServices. Les risques sont vari\u00e9s, certains peuvant\nconduire \u00e0 l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mac OS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple du 01/08/2006",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2005-2335 (GCVE-0-2005-2335)

Vulnerability from cvelistv5

CERTA-2006-AVI-317

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature