漏洞信息详情
Apple Mac OS X AppleTalk AIOCRegLocalZN IOCTL栈缓冲区溢出漏洞
漏洞简介
Apple Mac OS X AppleTalk本地用户通过调用AIOCREGLOCALZN ioctl命令时使用套接字上的特制数据结构,发起拒绝服务攻击(内核恐慌)。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Apple Mac OS X Server 10.4
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.1
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads
Apple Mac OS X 10.4.1
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads
Apple Mac OS X 10.4.2
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.2
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.3
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4.3
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4.4
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.4
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.5
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads
Apple Mac OS X 10.4.5
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.6
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4.6
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4.7
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.7
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.8
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
Apple Mac OS X 10.4.8
Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/
参考网址
来源: TA07-072A
名称: TA07-072A
链接:http://www.us-cert.gov/cas/techalerts/TA07-072A.html
来源: MISC
链接:http://projects.info-pull.com/mokb/MOKB-27-11-2006.html
来源: XF
名称: macos-aiocreglocalzn-dos(30552)
链接:http://xforce.iss.net/xforce/xfdb/30552
来源: SECTRACK
名称: 1017751
链接:http://www.securitytracker.com/id?1017751
来源: BID
名称: 21317
链接:http://www.securityfocus.com/bid/21317
来源: OSVDB
名称: 30722
链接:http://www.osvdb.org/30722
来源: VUPEN
名称: ADV-2007-0930
链接:http://www.frsirt.com/english/advisories/2007/0930
来源: VUPEN
名称: ADV-2006-4746
链接:http://www.frsirt.com/english/advisories/2006/4746
来源: SECUNIA
名称: 24479
链接:http://secunia.com/advisories/24479
来源: SECUNIA
名称: 23134
链接:http://secunia.com/advisories/23134
来源: APPLE
名称: APPLE-SA-2007-03-13
链接:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
来源: docs.info.apple.com
链接:http://docs.info.apple.com/article.html?artnum=305214
受影响实体
- Apple Mac_os_x<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...