high7.2Public exploit code
CVE-2009-1238
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of servic…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)2009-03-23 · dos · osx · Verified
Impact
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.5.6 Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3 |
| Apple | Mac Os X Server | through 10.5.6 Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34424
- http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c
- http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
- http://www.securityfocus.com/bid/34202
- https://www.exploit-db.com/exploits/8265
- http://secunia.com/advisories/34424
- http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c
- http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
- http://www.securityfocus.com/bid/34202
- https://www.exploit-db.com/exploits/8265