Overview
A buffer overflow in Apple Mac OS X Directory Service's authentication process may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Description
Apple Mac OS X Server Directory Service provides reading, writing, and authentication services within the Apple Open Directory Architecture. A buffer overflow exists in the authentication process used by Apple Directory Service. A buffer within an unspecified routine used by the authentication process can be overwritten via a specially crafted authentication request. For more information, please refer to Apple Security Update 2005-007. |
Impact
A remote, unauthenticated attacker may be able to execute arbitrary code with the privileges of the Apple Directory Service's authentication process. |
Solution
Apple a patch |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was reported in Apple Security Update 2005-007.
This document was written by Jeff Gennari.
Other Information
| CVE IDs: | CVE-2005-2507 |
| Severity Metric: | 18.17 |
| Date Public: | 2005-08-15 |
| Date First Published: | 2005-08-17 |
| Date Last Updated: | 2005-08-17 17:13 UTC |
| Document Revision: | 30 |