Published: 27/04/2010 Updated: 10/12/2010

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x prior to 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service (filesystem corruption) via a crafted application that calls the mkdir and link functions, related to the fsck_hfs program in the diskdev_cmds component.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x 10.5.8
apple mac os x 10.6.0
apple mac os x 10.6.4
apple mac os x 10.6.1
apple mac os x 10.6.3
apple mac os x 10.6.2

// -----BEGIN PGP SIGNED MESSAGE----- // Hash: SHA1 /* Proof of Concept for CVE-2010-0105 MacOS X 106 hfs file system attack (Denial of Service) by Maksymilian Arciemowicz from SecurityReasoncom securityreasoncom/achievement_exploitalert/15 NOTE: This DoS will be localized in phase Checking multi-linked directories So we n ...

Mac OS X version 1063 suffers from a HFS related denial of service vulnerability ...

Mac OS X version 1011 suffered from an FTS deep structure of the file system buffer overflow vulnerability ...

MacOS X 1011 suffers from a hardlink bomb issue that causes resource exhaustion ...

The MacOS X 1011 FTS library suffers from a buffer overflow vulnerability ...

Multiple vulnerabilities have been reported in HFS, including a hard linking issue that can be used to trigger a denial of service condition ...

NVD-CWE-Other http://securityreason.com/achievement_securityalert/83 http://www.securityfocus.com/bid/39658 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://support.apple.com/kb/HT4435 http://www.securitytracker.com/id?1024723 https://nvd.nist.gov https://www.exploit-db.com/exploits/12375/

CVE-2010-0105

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect