Vulnerability CVE-2007-2386 - CERT Civis.Net

Vulnerability Name:

CVE-2007-2386 (CCN-34493)

Assigned:

2007-05-24

Published:

2007-05-24

Updated:

2017-07-29

Summary:

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

CVSS v3 Severity:

9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.4 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:C)
7.8 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:C/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): Complete

7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
6.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2007-2386

Source: CCN
Type: Apple Security Update 2007-005
About Security Update 2007-005

Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=305530

Source: CCN
Type: Apple TV 1.1 Security Update
About the security content of Apple TV 1.1

Source: CCN
Type: Apple Web site
Apple security updates

Source: APPLE
Type: UNKNOWN
APPLE-SA-2007-06-20

Source: APPLE
Type: UNKNOWN
APPLE-SA-2007-05-24

Source: SECUNIA
Type: UNKNOWN
25402

Source: CCN
Type: SA25745
Apple TV UPnP IGD Buffer Overflow Vulnerability

Source: SECUNIA
Type: UNKNOWN
25745

Source: CCN
Type: SECTRACK ID: 1018123
Mac OS X Buffer Overflow in mDNSResponder Lets Remote Users Execute Arbitrary Code

Source: CCN
Type: IBM Internet Security Systems Protection Alert May 24, 2007
Apple Mac OS X mDNSResponder UPnP IGD buffer overflow

Source: CCN
Type: US-CERT VU#221876
Apple Mac OS X mDNSResponder buffer overflow vulnerability

Source: CERT-VN
Type: US Government Resource
VU#221876

Source: OSVDB
Type: UNKNOWN
35142

Source: CCN
Type: OSVDB ID: 35142
Apple Mac OS X mDNSResponder UPnP Internet Gateway Device (IGD) Packet Remote Overflow

Source: CCN
Type: OSVDB ID: 54089
Apple Mac OS X mDNSResponder Unspecified Arbitrary Remote Code Execution

Source: BID
Type: UNKNOWN
24144

Source: CCN
Type: BID-24144
Apple Mac OS X 2007-005 Multiple Security Vulnerabilities

Source: BID
Type: UNKNOWN
24159

Source: CCN
Type: BID-24159
Apple Mac OS X mDNSResponder Remote Buffer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1018123

Source: VUPEN
Type: UNKNOWN
ADV-2007-1939

Source: VUPEN
Type: UNKNOWN
ADV-2007-2269

Source: XF
Type: UNKNOWN
macos-mdnsresponder-upnp-bo(34493)

Source: XF
Type: UNKNOWN
macos-mdnsresponder-upnp-bo(34493)

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [01-08-2011]

Source: CCN
Type: Rapid7 Vulnerability and Exploit Database [05-25-2007]
Mac OS X mDNSResponder UPnP Location Overflow

Vulnerable Configuration:

Configuration 1:

cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:apple:mac_os_x:10.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

Denotes that component is vulnerable