'X'에 해당되는 글 2건

  1. 2008.12.17 Apple Mac OS X Security Update Fixes Multiple Vulnerabilities by CEOinIRVINE
  2. 2008.11.23 Can X Prizes Spur Innovation? by CEOinIRVINE
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
Secunia Advisory: SA33179
Release Date: 2008-12-16
Popularity: 468 views

Critical:
Highly critical
Impact: Security Bypass
Cross Site Scripting
Manipulation of data
Exposure of sensitive information
Privilege escalation
DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS: Apple Macintosh OS X

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference: CVE-2008-1391
CVE-2008-3623
CVE-2008-4217
CVE-2008-4218
CVE-2008-4219
CVE-2008-4220
CVE-2008-4221
CVE-2008-4222
CVE-2008-4223
CVE-2008-4224
CVE-2008-4234
CVE-2008-4236
CVE-2008-4237
CVE-2008-4818
CVE-2008-4819
CVE-2008-4820
CVE-2008-4821
CVE-2008-4822
CVE-2008-4823
CVE-2008-4824


Description:
Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.

1) An infinite loop when processing certain embedded fonts in PDF files within the Apple Type Services server can be exploited to cause a DoS (Denial of Service) by e.g. tricking a user into opening a malicious PDF file.

2) A signedness error when handling certain CPIO archive headers exists within BOM. This can be exploited to execute arbitrary code by e.g. downloading or viewing a specially crafted CPIO archive.

3) An error within the processing of color spaces within CoreGraphics can be exploited to cause a heap-based buffer overflow by e.g. tricking a user into viewing a specially crafted image.

Successful exploitation may allow the execution of arbitrary code.

4) Some security issues and vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to bypass certain security restrictions, manipulate certain data, conduct cross-site scripting attacks, or disclose sensitive information.

For more information:
SA32270

5) Multiple integer overflows exist within the "i386_set_ldt()" and "i386_get_ldt()" system calls, which can be exploited by malicious, local users to execute arbitrary code with system privileges.

Note: This does not affect PowerPC systems.

6) An infinite loop when handling exceptions in an application linked to libraries on an NFS share can be exploited to cause a system shutdown.

7) An integer overflow error exists in the "inet_net_pton()" API of Libsystem. This can potentially be exploited to e.g. compromise an application using the vulnerable function.

8) An unspecified error when processing certain input within the "strptime()" API of Libsystem can be exploited to cause a memory corruption and potentially execute arbitrary code by e.g. passing a specially crafted date string to an application using the vulnerable function.

9) The "Managed Client" functionality does not always apply the managed screen saver settings correctly, potentially resulting in e.g. the screen saver lock not working as intended.

10) An infinite loop when processing certain TCP packets exists in natd, which can be exploited to cause a DoS by sending specially crafted TCP packets to a vulnerable system.

Successful exploitation requires that Internet Sharing is enabled.

11) An unspecified error within the Podcast Producer server can be exploited to bypass the authentication mechanism and access administrative functions.

12) An unspecified error within the handling of malformed UDF volumes can be exploited to cause a system shutdown by e.g. opening a specially crafted ISO file.

Additionally, this update enhances the CoreTypes "Download Validation" capability to detect and warn about more potentially dangerous file types.

Solution:
Update to Mac OS X 10.5.6 or apply Apple Security Update 2008-008.
http://www.apple.com/support/downloads/

Provided and/or discovered by:
1) The vendor credits Michael Samarin and Mikko Vihonen, Futurice Ltd
2, 3, 8) Reported by the vendor.
5) The vendor credits Richard Vaneeden, IOActive, Inc
6) The vendor credits Ben Loer, Princeton University
9) The vendor credits John Barnes of ESRI and Trevor Lalish-Menagh of Tamman Technologies, Inc
10) The vendor credits Alex Rosenberg of Ohmantics and Gary Teter of Paizo Publishing
12) The vendor credits Mauro Notarianni of PCAX Solutions

Original Advisory:
http://support.apple.com/kb/HT3338

Other References:
SA32270:
http://secunia.com/advisories/32270/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

'Hacking' 카테고리의 다른 글

PE Format Analysys  (0) 2008.12.18
Buffer Overflow  (0) 2008.12.18
Getting Started Reverse Engineering  (0) 2008.12.16
Problems with Penetration Testing  (0) 2008.12.08
Security Job  (0) 2008.12.04
Posted by CEOinIRVINE
l

Contests such as Peter Diamandis' X Prizes offer big purses for breakthrough ideas. But can prize money do more to stimulate innovation than existing incentives?

Today the 47-year-old Diamandis is often hailed as a visionary. After securing funding, his handsome offer ended up prompting a hoped-for space race, with Diamandis awarding the $10 million in 2004 to a team bankrolled by Microsoft (MSFT) co-founder Paul Allen. Since then, X Prize Foundation has started three more challenges—for super-efficient cars, human genome sequencing, and lunar space flight. Diamandis and his staff now are evaluating ideas from would-be sponsors for competitions on such causes as improving health care and promoting clean energy. If the ideas are promising, the foundation would then draft rules and solicit entrants.

GENIUS AT RAZZMATAZZ

His X Prize, moreover, has become a template for organizations, companies, and even the federal government. The format: Announce an attention-grabbing goal, find a benefactor who'll put up the prize money or pay for it yourself, wait as the brightest minds race each other to come up with the answer, and then bask when you declare a winner. Today there are dozens of copycat contests in the U.S. and Europe for everything from curing Lou Gehrig's disease to solving age-old math conundrums. Awards run from $75,000 to $50 million.

But as contests have proliferated, so, too, have questions about their ability to push forward the boundaries of technology. Are they better at yielding breakthroughs than traditional research and development? Can Lotto-size payouts solve monstrously complex problems? Or are they a fad that stokes vanity-driven entrepreneurs focused on smaller-scale challenges?

Diamandis, not surprisingly, predicts that cash competitions will resolve some of "the world's grand challenges." When he proposed a prize for space travel, he recalls, "a lot of people also told me it was a stupid idea and that no one could win it." But he concedes there are problems that you can't simply "throw a prize at." And at least some scientists see contests as ultimately immaterial in their fields. Richard Gibbs, director of the Human Genome Sequencing Center at Baylor College of Medicine in Houston, notes that researchers have made huge advances in understanding DNA without the lure of a sweepstakes. "The X Prize is cute," he says, "but is not really the driver." Still, he and others say what's the harm if contests generate excitement about science.

Diamandis is an unassuming yet intense plug of a man with a broad smile. Dressed in a black blazer with pointed lapels and black shirt open at the neck, shirttails out, he displays the Space Age paraphernalia that fills his office within the foundation's spacious new headquarters in Playa Vista, Calif.: a portrait of actor William Shatner from his Star Trek days, models of various space vehicles, and a sword commemorating Diamandis' own victory in a big contest, the $500,000 Heinlein Prize in 2006 for contributions to the commercialization of space. A large component of the X Prize is Diamandis' genius at razzmatazz. It helps that the founder's own story resembles a parable of the triumph of persistence.

Posted by CEOinIRVINE
l