← back
CVE-2006-5836

CVE-2006-5836

EPSS 1.3%
The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a file descriptor with an unrecognized file type.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28948unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://docs.info.apple.com/article.html?artnum=305214http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlhttp://projects.info-pull.com/mokb/MOKB-09-11-2006.htmlhttp://secunia.com/advisories/22808http://secunia.com/advisories/24479https://exchange.xforce.ibmcloud.com/vulnerabilities/30152http://www.osvdb.org/30216http://www.securityfocus.com/bid/20982http://www.securitytracker.com/id?1017751http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlhttp://www.vupen.com/english/advisories/2006/4448http://www.vupen.com/english/advisories/2007/0930