ID:4376 - Exploit for Input validation error in macOS and macOS Server - CVE-2011-0180

 
Main Vulnerability Database Exploits ID:4376 - Exploit for Input validation error in macOS and macOS Server - CVE-2011-0180

ID:4376 - Exploit for Input validation error in macOS and macOS Server - CVE-2011-0180

Published: August 11, 2020


Vulnerability identifier: #VU45178
Vulnerability risk: Low
CVE-ID: CVE-2011-0180
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
macOS
macOS Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.


Remediation

Install update from vendor's website.