CVE-2005-0340

Description

Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet.

Affected products

• Apple / afp_server

Exploits & proofs of concept

• exploit-dbApple Mac OSX - AppleFileServer Remote Denial of Serviceby nemo

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=110791369419784&w=2
• MISChttp://www.securityfocus.com/bid/12478
• MAILING_LISThttp://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/19263