Vendor Status Note JVNCIAC-P-156

Apple Mac OS X にバッファオーバーフロー等の複数の脆弱性

Apple Mac OS X には、バッファオーバーフロー等の複数の脆弱性があります。

ローカルユーザが root 権限を取得したりする等の影響を受ける可能性があります。

ベンダ	リンク	更新日
アップル	Security Update 2005-003 について

1. ISS X-Force Database: cyrus-imap-preauth-bo(10744)
   Cyrus IMAP Server pre-authentication buffer overflow
2. ISS X-Force Database: cyrus-sasl-username-bo(10810)
   Cyrus-SASL library username buffer overflow
3. ISS X-Force Database: cyrus-sasl-saslauthd-bo(10811)
   Cyrus-SASL library saslauthd daemon escape character buffer overflow
4. ISS X-Force Database: cyrus-sasl-logwriter-bo(10812)
   Cyrus-SASL library log writer buffer overflow
5. ISS X-Force Database: cyrus-sasl-saslpath(17643)
   Cyrus-SASL SASL_PATH environment variable
6. ISS X-Force Database: cyrus-imap-username-bo(18198)
   Cyrus IMAP username buffer overflow
7. ISS X-Force Database: cyrus-imap-commands-execute-code(18199)
   Cyrus IMAP PARTIAL and FETCH commands execute code
8. ISS X-Force Database: cyrus-magic-plus-bo(18274)
   Cyrus IMAP Server 'imap magic plus' support code buffer overflow
9. ISS X-Force Database: cyrus-mysaslcanonuser-offbyone-bo(18333)
   Cyrus IMAP Server mysasl_canon_user off-by-one buffer overflow
10. ISS X-Force Database: multiple-browsers-idn-spoof(19236)
    multiple Web browsers IDN URL spoofing
11. ISS X-Force Database: Applefileserver-fploginext-dos(19263)
    AppleFileServer FPLoginExt denial of service
12. ISS X-Force Database: gnumailman-private-directory-traversal(19274)
    GNU Mailman private.py directory traversal
13. ISS X-Force Database: macos-cfcharsetpath-bo(19776)
    Mac OS X CF_CHARSET_PATH buffer overflow
14. ISS X-Force Database: macos-bluetooth-bypass-security(19780)
    Mac OS X Bluetooth Setup Assistant bypass security
15. ISS X-Force Database: macos-directories-insecure-permissions(19782)
    Mac OS X directories have insecure permissions
16. ISS X-Force Database: macos-dropbox-obtain-information(19783)
    Mac OS X Drop Box obtain information