Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

critical Nessus Plugin ID 38743

Synopsis

The remote host is missing a Mac OS X update that fixes various security issues.

Description

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied.

This security update contains fixes for the following products :

- Apache
- ATS
- BIND
- CoreGraphics
- Cscope
- CUPS
- Disk Images
- enscript
- Flash Player plug-in
- Help Viewer
- IPSec
- Kerberos
- Launch Services
- libxml
- Net-SNMP
- Network Time
- OpenSSL
- QuickDraw Manager
- Spotlight
- system_cmds
- telnet
- Terminal
- X11

Solution

Install Security Update 2009-002 or later.

See Also

http://support.apple.com/kb/HT3549

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Plugin Details

Severity: Critical

ID: 38743

File Name: macosx_SecUpd2009-002.nasl

Version: 1.24

Type: local

Agent: macosx

Published: 5/13/2009

Updated: 7/14/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Required KB Items: Host/MacOSX/packages, Host/uname

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/12/2009

Vulnerability Publication Date: 1/21/2005

Reference Information

CVE: CVE-2004-1184, CVE-2004-1185, CVE-2004-1186, CVE-2006-0747, CVE-2007-2754, CVE-2008-2939, CVE-2008-3529, CVE-2008-3651, CVE-2008-3652, CVE-2008-3790, CVE-2008-3863, CVE-2008-4309, CVE-2008-5077, CVE-2009-0010, CVE-2009-0021, CVE-2009-0025, CVE-2009-0114, CVE-2009-0145, CVE-2009-0146, CVE-2009-0147, CVE-2009-0148, CVE-2009-0149, CVE-2009-0154, CVE-2009-0156, CVE-2009-0158, CVE-2009-0159, CVE-2009-0160, CVE-2009-0164, CVE-2009-0165, CVE-2009-0519, CVE-2009-0520, CVE-2009-0846, CVE-2009-0847, CVE-2009-0942, CVE-2009-0943, CVE-2009-0944, CVE-2009-0946

BID: 30087, 30657, 33890, 34408, 34409, 34481, 34550, 34568, 34665, 34805, 34932, 34937, 34938, 34939, 34941, 34942, 34947, 34948, 34950, 34952, 34962

CWE: 119, 189, 20, 200, 287, 399, 79, 94