Details of VAR-201003-0239

ID

VAR-201003-0239

CVE

CVE-2010-0504

TITLE

Apple Mac OS X of iChat Server stack-based buffer overflow vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2010-001259

DESCRIPTION

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Successful exploits may allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition. The following are vulnerable: Mac OS X Server 10.5.8 Mac OS X Server 10.6 prior to 10.6.3 NOTE: These issues were previously covered in BID 39020 (Apple Mac OS X APPLE-SA-2010-03-29-1 Multiple Security Vulnerabilities) but have been assigned their own record to better document them

Trust: 1.98

sources: NVD: CVE-2010-0504 // JVNDB: JVNDB-2010-001259 // BID: 39255 // VULHUB: VHN-43109

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.6	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.2	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.1	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.4	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.5	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.0	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.8	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.7	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.5.3	Trust: 1.6
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.6.0	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	eq	version:	10.6.1	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	lte	version:	10.6.2	Trust: 1.0
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.5.8	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	v10.6 to v10.6.2	Trust: 0.8
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.6.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.6.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.8	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.7	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.6	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.4	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.6	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x10.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	ne	version:	x10.6.3	Trust: 0.3

sources: BID: 39255 // JVNDB: JVNDB-2010-001259 // CNNVD: CNNVD-201003-466 // NVD: CVE-2010-0504

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2010-0504
value:	HIGH
Trust: 1.0
NVD:	CVE-2010-0504
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201003-466
value:	HIGH
Trust: 0.6
VULHUB:	VHN-43109
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2010-0504
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-43109
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-43109 // JVNDB: JVNDB-2010-001259 // CNNVD: CNNVD-201003-466 // NVD: CVE-2010-0504

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-43109 // JVNDB: JVNDB-2010-001259 // NVD: CVE-2010-0504

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201003-466

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201003-466

CONFIGURATIONS

sources: JVNDB: JVNDB-2010-001259

PATCH

title:	HT4077	url:	http://support.apple.com/kb/HT4077	Trust: 0.8
title:	HT4077	url:	http://support.apple.com/kb/HT4077?viewlocale=ja_JP	Trust: 0.8

sources: JVNDB: JVNDB-2010-001259

EXTERNAL IDS

db:	NVD	id:	CVE-2010-0504	Trust: 2.8
db:	JVNDB	id:	JVNDB-2010-001259	Trust: 0.8
db:	CNNVD	id:	CNNVD-201003-466	Trust: 0.7
db:	NSFOCUS	id:	14715	Trust: 0.6
db:	APPLE	id:	APPLE-SA-2010-03-29-1	Trust: 0.6
db:	BID	id:	39255	Trust: 0.4
db:	VULHUB	id:	VHN-43109	Trust: 0.1

sources: VULHUB: VHN-43109 // BID: 39255 // JVNDB: JVNDB-2010-001259 // CNNVD: CNNVD-201003-466 // NVD: CVE-2010-0504

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2010//mar/msg00001.html	Trust: 1.7
url:	http://support.apple.com/kb/ht4077	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0504	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0504	Trust: 0.8
url:	http://www.nsfocus.net/vulndb/14715	Trust: 0.6
url:	http://www.apple.com/macosx/	Trust: 0.3

sources: VULHUB: VHN-43109 // BID: 39255 // JVNDB: JVNDB-2010-001259 // CNNVD: CNNVD-201003-466 // NVD: CVE-2010-0504

CREDITS

Michael KisorDamian Put <pucik@cc-team.org>

Trust: 0.6

sources: CNNVD: CNNVD-201003-466

SOURCES

db:	VULHUB	id:	VHN-43109
db:	BID	id:	39255
db:	JVNDB	id:	JVNDB-2010-001259
db:	CNNVD	id:	CNNVD-201003-466
db:	NVD	id:	CVE-2010-0504

LAST UPDATE DATE

2025-04-11T21:25:06.580000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-43109	date:	2010-03-31T00:00:00
db:	BID	id:	39255	date:	2010-03-29T00:00:00
db:	JVNDB	id:	JVNDB-2010-001259	date:	2010-04-14T00:00:00
db:	CNNVD	id:	CNNVD-201003-466	date:	2010-03-31T00:00:00
db:	NVD	id:	CVE-2010-0504	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-43109	date:	2010-03-30T00:00:00
db:	BID	id:	39255	date:	2010-03-29T00:00:00
db:	JVNDB	id:	JVNDB-2010-001259	date:	2010-04-14T00:00:00
db:	CNNVD	id:	CNNVD-201003-466	date:	2010-03-30T00:00:00
db:	NVD	id:	CVE-2010-0504	date:	2010-03-30T18:30:00.703