Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

The remote host is affected by the vulnerability described in GLSA-201201-05 (mDNSResponder: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in mDNSResponder. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local or remote attacker may be able to execute arbitrary code with       root privileges or cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. 

This update fixes security flaws in the following applications :

Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN

ID	Name	Product	Family	Severity
57631	GLSA-201201-05 : mDNSResponder: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
25297	Mac OS X Multiple Vulnerabilities (Security Update 2007-005)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2007-2386

critical

Tenable Plugins

critical

critical