Apple Mac OS X NFS logging
| macosx-nfs-logging (16291) |  Low Risk |
Description:
Apple Mac OS X has an unspecified vulnerability in the Network File System (NFS) implementation. A vulnerability exists in NFS logging when tracing system calls.
Consequences:
Other
Remedy:
Upgrade to the latest version of Mac OS X (10.3.4 or later), available from the Apple Web site. See References.
References:
- Apple Computer, Inc.Web site: Apple - Support - Downloads - Mac OS X Update 10.3.4.
- AppleCare Knowledge Base Document 61798: Apple Security Updates.
- BID-10432: Apple Mac OS X Multiple Unspecified Security Vulnerabilities
- CVE-2004-0513: Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to logging when tracing system calls.
- SECTRACK ID: 1010329: Apple Mac OS X NFS Ktrace Logging Flaw Lets Local Users Deny Service
Platforms Affected:
- Apple Mac OS X 10.0
- Apple Mac OS X 10.0.4
- Apple Mac OS X 10.1
- Apple Mac OS X 10.1.1
- Apple Mac OS X 10.1.2
- Apple Mac OS X 10.1.3
- Apple Mac OS X 10.1.4
- Apple Mac OS X 10.1.5
- Apple Mac OS X 10.2
- Apple Mac OS X 10.2.1
- Apple Mac OS X 10.2.2
- Apple Mac OS X 10.2.3
- Apple Mac OS X 10.2.4
- Apple Mac OS X 10.2.5
- Apple Mac OS X 10.2.6
- Apple Mac OS X 10.2.7
- Apple Mac OS X 10.2.8
- Apple Mac OS X 10.3
- Apple Mac OS X 10.3.1
- Apple Mac OS X 10.3.2
- Apple Mac OS X 10.3.3
- Apple Mac OS X Server 10.0.1
- Apple Mac OS X Server 10.0.2
- Apple Mac OS X Server 10.0.3
Reported:
May 29, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net