Computer Security
[EN] securityvulns.ru
no-pyccku



Multiple MacOS X security vulnerabilities
Published:30.11.2006
Source:CERT
SecurityVulns ID:6873
Type:remote
Level:7/10
Description:Apple Type Services server font processing buffer overflow. ftpd may allow arbitrary users to determine account name validity. CFNetwork may allow arbitrary FTP commands to be executed via a crafted FTP URI. Security Framework Secure Transport may not negotiate the best cipher available. PPP driver fails to properly validate PADI packets (buffer overflow). Finder fails to properly handle malformed .DS_Store files. WebKit deallocated object access vulnerability.
Original documentdocumentnoreply_(at)_musecurity.com, [Full-disclosure] [MU-200611-01] Pre-Authentication Vulnerability in Mac OSX kernel PPP (30.11.2006)
 documentCERT, US-CERT Technical Cyber Security Alert TA06-333A -- Apple Releases Security Update to Address Multiple Vulnerabilities (30.11.2006)
Discuss:Read or add your comments to this news (0 comments)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
 



Рейтинг@Mail.ru