Vulnerability Name:
CVE-2006-6130 (CCN-30552)
Assigned:
2006-11-27
Published:
2006-11-27
Updated:
2017-07-29
Summary:
Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN ioctl command with a crafted data structure on an AppleTalk socket.
CVSS v3 Severity:
5.7 Medium
(CCN CVSS v3.1 Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
)
Exploitability Metrics:
Attack Vector (AV):
Local
Attack Complexity (AC):
High
Privileges Required (PR):
None
User Interaction (UI):
None
Scope:
Scope (S):
Unchanged
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
Low
Availibility (A):
High
CVSS v2 Severity:
4.9 Medium
(CVSS v2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
)
3.9 Low
(Temporal CVSS v2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C/E:POC/RL:OF/RC:C
)
Exploitability Metrics:
Access Vector (AV):
Local
Access Complexity (AC):
Low
Authentication (Au):
None
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
None
Availibility (A):
Complete
4.7 Medium
(CCN CVSS v2 Vector:
AV:L/AC:H/Au:N/C:N/I:P/A:C
)
3.7 Low
(CCN Temporal CVSS v2 Vector:
AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:OF/RC:C
)
Exploitability Metrics:
Access Vector (AV):
Local
Access Complexity (AC):
High
Athentication (Au):
None
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
Partial
Availibility (A):
Complete
Vulnerability Type:
CWE-Other
Vulnerability Consequences:
Denial of Service
References:
Source: MITRE
Type: CNA
CVE-2006-6130
Source: CCN
Type: Mac OS X 10.4.9 and Security Update 2007-003
About the security content of Mac OS X 10.4.9 and Security Update 2007-003
Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=305214
Source: APPLE
Type: UNKNOWN
APPLE-SA-2007-03-13
Source: CCN
Type: MOKB-27-11-2006
Mac OS X AppleTalk AIOCREGLOCALZN Ioctl Memory Corruption
Source: MISC
Type: Exploit
http://projects.info-pull.com/mokb/MOKB-27-11-2006.html
Source: CCN
Type: SA23134
Apple Mac OS X AppleTalk Privilege Escalation
Source: SECUNIA
Type: UNKNOWN
23134
Source: CCN
Type: SA24479
Mac OS X Security Update Fixes Multiple Vulnerabilities
Source: SECUNIA
Type: UNKNOWN
24479
Source: CCN
Type: SECTRACK ID: 1017751
Mac OS X Lets Remote Users Execute Arbitrary Code and Local Users Obtain Elevated Privileges and Deny Service
Source: CCN
Type: Apple Web site
Apple - Support - Downloads
Source: OSVDB
Type: UNKNOWN
30722
Source: CCN
Type: OSVDB ID: 30722
Apple Mac OS X AppleTalk AIOCREGLOCALZN ioctl Command Local DoS
Source: BID
Type: UNKNOWN
21317
Source: CCN
Type: BID-21317
Apple Mac OS X AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow Vulnerability
Source: SECTRACK
Type: UNKNOWN
1017751
Source: CERT
Type: US Government Resource
TA07-072A
Source: VUPEN
Type: UNKNOWN
ADV-2006-4746
Source: VUPEN
Type: UNKNOWN
ADV-2007-0930
Source: XF
Type: UNKNOWN
macos-aiocreglocalzn-dos(30552)
Source: XF
Type: UNKNOWN
macos-aiocreglocalzn-dos(30552)
Vulnerable Configuration:
Configuration 1
:
cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:*
Configuration CCN 1
:
cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
OR
cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
Denotes that component is vulnerable
BACK
apple
mac os x *
apple
mac os x 10.4
apple
mac os x 10.4.1
apple
mac os x server 10.4.1
apple
mac os x server 10.4
apple
mac os x server 10.4.2
apple
mac os x 10.4.2
apple
mac os x 10.4.4
apple
mac os x 10.4.3
apple
mac os x server 10.4.3
apple
mac os x server 10.4.4
apple
mac os x 10.4.5
apple
mac os x server 10.4.5
apple
mac os x 10.4.6
apple
mac os x server 10.4.6
apple
mac os x 10.4.7
apple
mac os x server 10.4.7
apple
mac os x server 10.4.8
apple
mac os x 10.4.8
apple
mac os x 10.4.10
apple
mac os x server 10.4.10
apple
mac os x 10.4.11
apple
mac os x server 10.4.11