Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname.

The remote host is affected by the vulnerability described in GLSA-201201-05 (mDNSResponder: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in mDNSResponder. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local or remote attacker may be able to execute arbitrary code with       root privileges or cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

ID	Name	Product	Family	Severity
57631	GLSA-201201-05 : mDNSResponder: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2008-0989

high

Tenable Plugins

critical

critical