Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

The remote host has iTunes installed, a popular media player for Windows and Mac OS. 

Versions of iTunes earlier than 10.5.1 use an unsecured HTTP connection when checking for or retrieving software updates, which could allow a man-in-the-middle attacker to provide a Trojan horse update that appears to originate from Apple.

The version of Apple iTunes on the remote host is prior to version 10.5.1. It is, therefore, affected by a man-in-the-middle vulnerability due to using unsecured HTTP connections when checking for or retrieving software updates. A remote attacker can exploit this to execute arbitrary code by means of a trojan horse update that appears to originate from Apple.

The version of Apple iTunes installed on the remote Mac OS X host is earlier than 10.5.1. As such, it uses an unsecured HTTP connection when checking for or retrieving software updates, which could allow a man-in-the-middle attacker to provide a Trojan horse update that appears to originate from Apple.

The version of iTunes installed on the remote Mac OS X host is earlier than 10.5.1.  As such, it uses an unsecured HTTP connection when checking for or retrieving software updates, which could allow a man-in-the-middle attacker to provide a Trojan horse update that appears to originate from Apple.

ID	Name	Product	Family	Type	Severity
6098	iTunes < 10.5.1 Update Authenticity Verification Weakness	Nessus Network Monitor	Web Clients		high
56873	Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	Remote	medium
56872	Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (credentialed check)	Nessus	Windows	Local	medium
56871	iTunes < 10.5.1 Update Authenticity Verification Weakness (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-3434

high

Tenable Plugins

high

medium

medium

medium