CVE

Id
38670  
CVE No.
CVE-2009-1235  
Status
Candidate  
Description
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.  
Phase
Assigned (20090402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423405 38670 CVE-2009-1235 MILW0RM:8266  View
423406 38670 CVE-2009-1235 URL:http://www.milw0rm.com/exploits/8266  View
423407 38670 CVE-2009-1235 MISC:http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c  View
423408 38670 CVE-2009-1235 MISC:http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh  View
423409 38670 CVE-2009-1235 MISC:http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181  View
423410 38670 CVE-2009-1235 CONFIRM:http://support.apple.com/kb/HT3757  View
423411 38670 CVE-2009-1235 APPLE:APPLE-SA-2009-08-05-1  View
423412 38670 CVE-2009-1235 URL:http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html  View
423413 38670 CVE-2009-1235 CERT:TA09-218A  View
423414 38670 CVE-2009-1235 URL:http://www.us-cert.gov/cas/techalerts/TA09-218A.html  View
423415 38670 CVE-2009-1235 BID:34203  View
423416 38670 CVE-2009-1235 URL:http://www.securityfocus.com/bid/34203  View
423417 38670 CVE-2009-1235 SECTRACK:1022671  View
423418 38670 CVE-2009-1235 URL:http://www.securitytracker.com/id?1022671  View
423419 38670 CVE-2009-1235 SECUNIA:34424  View
423420 38670 CVE-2009-1235 URL:http://secunia.com/advisories/34424  View
423421 38670 CVE-2009-1235 SECUNIA:36096  View
423422 38670 CVE-2009-1235 URL:http://secunia.com/advisories/36096  View
423423 38670 CVE-2009-1235 VUPEN:ADV-2009-0822  View
423424 38670 CVE-2009-1235 URL:http://www.vupen.com/english/advisories/2009/0822  View
423425 38670 CVE-2009-1235 VUPEN:ADV-2009-2172  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40180 JVNDB-2009-001186 IBM DB2 における重要な情報を取得される脆弱性 IBM DB2 には、クエリに関する処理に不備があることにより、重要な情報を取得される脆弱性が存在します。 CVE-2009-1239 38670 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001186.html  View