CVE-2009-1235
02.04.2009, 17:30
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 𝑥 ≤ 10.5.6 |
| apple | mac_os_x | 10.0 |
| apple | mac_os_x | 10.0.0 |
| apple | mac_os_x | 10.0.1 |
| apple | mac_os_x | 10.0.2 |
| apple | mac_os_x | 10.0.3 |
| apple | mac_os_x | 10.0.4 |
| apple | mac_os_x | 10.1 |
| apple | mac_os_x | 10.1.0 |
| apple | mac_os_x | 10.1.1 |
| apple | mac_os_x | 10.1.2 |
| apple | mac_os_x | 10.1.3 |
| apple | mac_os_x | 10.1.4 |
| apple | mac_os_x | 10.1.5 |
| apple | mac_os_x | 10.2 |
| apple | mac_os_x | 10.2.0 |
| apple | mac_os_x | 10.2.1 |
| apple | mac_os_x | 10.2.2 |
| apple | mac_os_x | 10.2.3 |
| apple | mac_os_x | 10.2.4 |
| apple | mac_os_x | 10.2.5 |
| apple | mac_os_x | 10.2.6 |
| apple | mac_os_x | 10.2.7 |
| apple | mac_os_x | 10.2.8 |
| apple | mac_os_x | 10.3 |
| apple | mac_os_x | 10.3.0 |
| apple | mac_os_x | 10.3.1 |
| apple | mac_os_x | 10.3.2 |
| apple | mac_os_x | 10.3.3 |
| apple | mac_os_x | 10.3.4 |
| apple | mac_os_x | 10.3.5 |
| apple | mac_os_x | 10.3.6 |
| apple | mac_os_x | 10.3.7 |
| apple | mac_os_x | 10.3.8 |
| apple | mac_os_x | 10.3.9 |
| apple | mac_os_x | 10.4 |
| apple | mac_os_x | 10.4.0 |
| apple | mac_os_x | 10.4.1 |
| apple | mac_os_x | 10.4.2 |
| apple | mac_os_x | 10.4.3 |
| apple | mac_os_x | 10.4.4 |
| apple | mac_os_x | 10.4.5 |
| apple | mac_os_x | 10.4.6 |
| apple | mac_os_x | 10.4.7 |
| apple | mac_os_x | 10.4.8 |
| apple | mac_os_x | 10.4.8 |
| apple | mac_os_x | 10.4.8 |
| apple | mac_os_x | 10.4.8 |
| apple | mac_os_x | 10.4.9 |
| apple | mac_os_x | 10.4.10 |
| apple | mac_os_x | 10.4.11 |
| apple | mac_os_x | 10.5 |
| apple | mac_os_x | 10.5.0 |
| apple | mac_os_x | 10.5.1 |
| apple | mac_os_x | 10.5.2 |
| apple | mac_os_x | 10.5.2:2008-002 |
| apple | mac_os_x | 10.5.3 |
| apple | mac_os_x | 10.5.4 |
| apple | mac_os_x | 10.5.5 |
| apple | mac_os_x_server | 𝑥 ≤ 10.5.6 |
| apple | mac_os_x_server | 10.0 |
| apple | mac_os_x_server | 10.0.0 |
| apple | mac_os_x_server | 10.0.1 |
| apple | mac_os_x_server | 10.0.2 |
| apple | mac_os_x_server | 10.0.3 |
| apple | mac_os_x_server | 10.0.4 |
| apple | mac_os_x_server | 10.1 |
| apple | mac_os_x_server | 10.1.0 |
| apple | mac_os_x_server | 10.1.1 |
| apple | mac_os_x_server | 10.1.2 |
| apple | mac_os_x_server | 10.1.3 |
| apple | mac_os_x_server | 10.1.4 |
| apple | mac_os_x_server | 10.1.5 |
| apple | mac_os_x_server | 10.2 |
| apple | mac_os_x_server | 10.2.0 |
| apple | mac_os_x_server | 10.2.1 |
| apple | mac_os_x_server | 10.2.2 |
| apple | mac_os_x_server | 10.2.3 |
| apple | mac_os_x_server | 10.2.4 |
| apple | mac_os_x_server | 10.2.5 |
| apple | mac_os_x_server | 10.2.6 |
| apple | mac_os_x_server | 10.2.7 |
| apple | mac_os_x_server | 10.2.8 |
| apple | mac_os_x_server | 10.3 |
| apple | mac_os_x_server | 10.3.0 |
| apple | mac_os_x_server | 10.3.1 |
| apple | mac_os_x_server | 10.3.2 |
| apple | mac_os_x_server | 10.3.3 |
| apple | mac_os_x_server | 10.3.4 |
| apple | mac_os_x_server | 10.3.5 |
| apple | mac_os_x_server | 10.3.6 |
| apple | mac_os_x_server | 10.3.7 |
| apple | mac_os_x_server | 10.3.8 |
| apple | mac_os_x_server | 10.3.9 |
| apple | mac_os_x_server | 10.4 |
| apple | mac_os_x_server | 10.4.0 |
| apple | mac_os_x_server | 10.4.1 |
| apple | mac_os_x_server | 10.4.2 |
| apple | mac_os_x_server | 10.4.3 |
| apple | mac_os_x_server | 10.4.4 |
| apple | mac_os_x_server | 10.4.5 |
| apple | mac_os_x_server | 10.4.6 |
| apple | mac_os_x_server | 10.4.7 |
| apple | mac_os_x_server | 10.4.8 |
| apple | mac_os_x_server | 10.4.9 |
| apple | mac_os_x_server | 10.4.10 |
| apple | mac_os_x_server | 10.4.11 |
| apple | mac_os_x_server | 10.5 |
| apple | mac_os_x_server | 10.5.0 |
| apple | mac_os_x_server | 10.5.1 |
| apple | mac_os_x_server | 10.5.2 |
| apple | mac_os_x_server | 10.5.3 |
| apple | mac_os_x_server | 10.5.4 |
| apple | mac_os_x_server | 10.5.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References