Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: Swordmaker

Sweeeeeeet! Remote exploits ... yummmmy....


3 posted on 05/04/2005 11:26:19 AM PDT by Bush2000
[ Post Reply | Private Reply | To 2 | View Replies ]


To: Bush2000
Sweeeeeeet! Remote exploits ... yummmmy....

Not plural; singular. Only one of the issues seems to refer to a "remote exploit" and that was for a service that is not even provided with a OSX installation. The vulnerability seems to be in Apache... and may affect other Apache Unix installations as well.

Apache
CVE-ID: CAN-2005-1344
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9
Impact: The htdigest program contains a buffer overflow, which if used improperly in a CGI application, could allow a remote system compromise
Description: The htdigest program could be used in a CGI application to manage user access controls to a web server. htdigest contains a buffer overflow. This update fixes the buffer overflow in htdigest. Apple does not provide any CGI applications that use the htdigest program. Credit to JxT of SNOsoft for reporting this issue.

It's nice to close the vulnerability before there are any apps that could use it. Of course it makes one wonder what Jxt of SNOsoft is coding that required the use of htdigest that allowed him to find this hole.

4 posted on 05/04/2005 12:18:58 PM PDT by Swordmaker (tagline now open, please ring bell.)
[ Post Reply | Private Reply | To 3 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson