Description
Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow EDB-4759 · local · Dec 19, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2007-4238 vdb-entry
- 20071217 Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability third-party-advisory
- TA07-352A third-party-advisory
- 28136 third-party-advisory
- macos-smb-bo(39109) vdb-entry
- 26910 vdb-entry
- 26926 vdb-entry
- 1019106 vdb-entry
- APPLE-SA-2007-12-17 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307179
- 4759 exploit