Apple Mac OS X Security Update: Multiple Vulnerabilities (RCE, LPE, DoS) - CVE-2006-0384/0391

Critical Vulnerability Information Update Overview Release Date: March 2, 2006 Risk Level: Medium Reporter: Dave McKinney Vulnerability Details 1. Multiple Security Issues in PHP Module and Scripting Environment - CVE IDs: CVE-2005-3319, CVE-2005-3353, CVE-2005-3391, CVE-2005-3392 - Affected Versions: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5 - Download Options: Available from Apple's Software Update panel or Apple's software download website 2. Automount - CVE ID: CVE-2006-0384 - Impact: Malicious network servers may cause denial of service or arbitrary code execution - Description: Network file servers may mount filesystems with reserved names, causing the system to become unresponsive or execute arbitrary code 3. BOM Framework Directory Traversal - CVE ID: CVE-2006-0391 - Impact: Directory traversal may occur during extraction of BOM archives - Description: The BOM framework is vulnerable to directory traversal attacks when processing certain archive types, potentially allowing files to be extracted to user-writable locations 4. Directory Services - CVE IDs: CVE-2005-2715, CVE-2005-2714 - Impact: Malicious local users may create and manipulate files with root privileges - Description: The passwd program is vulnerable to temporary file attacks, leading to privilege escalation 5. IPSec Service Interruption - CVE ID: CVE-2006-0383 - Impact: Remote interruption of virtual private network connections - Description: Improper error handling in virtual private networks may allow remote attackers to interrupt services 6. Email Attachment Download Validation Failure - CVE ID: CVE-2006-0395 - Impact: Failure in validating email attachment downloads, preventing warnings about unsafe file types - Description: Email attachment download validation can be bypassed in certain cases; the update improves security by checking the entire file 7. rsync Command Stack Overflow - CVE ID: CVE-2005-3712 - Impact: May cause rsync server crashes or arbitrary code execution - Description: rsync servers using specific flags may suffer from stack overflow issues; this update prevents the issue by ensuring sufficient buffer size

Goal Reached Thanks to every supporter — we hit 100%!

Apple Mac OS X Security Update: Multiple Vulnerabilities (RCE, LPE, DoS) - CVE-2006-0384/0391