CVE-2009-1235

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.

• CWE-264

• http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
• http://secunia.com/advisories/34424
• http://secunia.com/advisories/36096
• http://support.apple.com/kb/HT3757
• http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.cExploit
• http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.shExploit
• http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
• http://www.securityfocus.com/bid/34203Exploit
• http://www.securitytracker.com/id?1022671
• http://www.us-cert.gov/cas/techalerts/TA09-218A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/0822Vendor Advisory
• http://www.vupen.com/english/advisories/2009/2172
• https://www.exploit-db.com/exploits/8266
• http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
• http://secunia.com/advisories/34424
• http://secunia.com/advisories/36096
• http://support.apple.com/kb/HT3757
• http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.cExploit
• http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.shExploit
• http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
• http://www.securityfocus.com/bid/34203Exploit
• http://www.securitytracker.com/id?1022671
• http://www.us-cert.gov/cas/techalerts/TA09-218A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/0822Vendor Advisory
• http://www.vupen.com/english/advisories/2009/2172
• https://www.exploit-db.com/exploits/8266

Published

Apr 2, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1229SQL injection vulnerability in Arcadwy Arcade Script allows …
• CVE-2009-1230Static code injection vulnerability in index.php in Podcast …
• CVE-2009-1231Unspecified vulnerability in the eClient in IBM DB2 Content …
• CVE-2009-1232Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remo…
• CVE-2009-1233Apple Safari 3.2.2 and 4 Beta on Windows allows remote attac…
• CVE-2009-1234Opera 9.64 allows remote attackers to cause a denial of serv…
• CVE-2009-1236Heap-based buffer overflow in the AppleTalk networking stack…
• CVE-2009-1237Multiple memory leaks in XNU 1228.3.13 and earlier on Apple …
• CVE-2009-1238Race condition in the HFS vfs sysctl interface in XNU 1228.8…
• CVE-2009-1239IBM DB2 9.1 before FP7 returns incorrect query results in ce…
• CVE-2009-1240Unspecified vulnerability in the IBM Proventia engine 4.9.0.…
• CVE-2009-1241Unspecified vulnerability in ClamAV before 0.95 allows remot…