The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.

The remote host is running a version of Mac OS X 10.4 that is older than version 10.4.8.  Mac OS X 10.4.8 contains several security fixes for the following programs :
 - CFNetwork
 - Flash Player
 - ImageIO
 - Kernel
 - LoginWindow
 - Preferences
 - QuickDraw Manager
 - SASL
 - WebCore
 - Workgroup Manager

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied.

Security Update 2006-006 contains several security fixes for the following programs :

 - CFNetwork
 - Flash Player
 - QuickDraw Manager
 - SASL
 - WebCore

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.8.

Mac OS X 10.4.8 contains several security fixes for the following programs :

 - CFNetwork
 - Flash Player
 - ImageIO
 - Kernel
 - LoginWindow
 - Preferences
 - QuickDraw Manager
 - SASL
 - WebCore
 - Workgroup Manager

ID	Name	Product	Family	Type	Severity
3757	Mac OS X < 10.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		medium
22479	Mac OS X Multiple Vulnerabilities (Security Update 2006-006)	Nessus	MacOS X Local Security Checks	Local	critical
22476	Mac OS X 10.4.x < 10.4.8 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2006-4392

high

Tenable Plugins

medium

critical

critical