Vulnerability CVE-2005-0985 - CERT Civis.Net

Vulnerability Name:

CVE-2005-0985 (CCN-40544)

Assigned:

2005-04-06

Published:

2005-04-06

Updated:

2008-09-05

Summary:

Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2005-0985

Source: CCN
Type: Apple Web site
About the security content of Mac OS X 10.3.8 Update

Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=301324

Source: CCN
Type: OSVDB ID: 30199
Apple Mac OS X Fan Control Unit (FCU) Driver Unspecified Local DoS

Source: XF
Type: UNKNOWN
macos-fcu-dos(40544)

Vulnerable Configuration:

Configuration 1:

cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version <= 10.3.7)

Configuration CCN 1:

cpe:/o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.0:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*

Denotes that component is vulnerable