SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

The remote Mac OS X host has a version of OS X Server installed that is prior to version 4.0.  It is, therefore, affected by the following vulnerabilities :

  - There are multiple vulnerabilities within the included     BIND, the most serious of which can lead to a denial of     service. (CVE-2013-3919, CVE-2013-4854, CVE-2014-0591)

  - There are multiple vulnerabilities within the included     LibYAML for the Profile Manager and ServerRuby, the most     serious of which can lead to arbitrary code execution.
    (CVE-2013-4164, CVE-2013-6393)

  - There are multiple vulnerabilities within the included     PostgreSQL, the most serious of which can lead to     arbitrary code execution. (CVE-2014-0060, CVE-2014-0061,     CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,     CVE-2014-0065, CVE-2014-0066)

  - An error exists related to the way SSL 3.0 handles     padding bytes when decrypting messages encrypted using     block ciphers in cipher block chaining (CBC) mode. A     man-in-the-middle attacker can decrypt a selected byte     of a cipher text in as few as 256 tries if they are able     to force a victim application to repeatedly send the     same data over newly created SSL 3.0 connections. This     is also known as the 'POODLE' issue. (CVE-2014-3566)

  - A cross-site scripting flaw exists in the Xcode Server     due to not properly validating input before returning it     to the user. This can allow a remote attacker, using a     specially crafted request, to execute code within the     browser / server trust relationship. (CVE-2014-4406)

  - A SQL injection flaw exists in the Wiki Server due to     not properly sanitizing user input before using it in     SQL queries. This can allow a remote attacker, using a     specially crafted request, to inject or manipulate SQL     queries, thus allowing the manipulation or disclosure     of arbitrary data. (CVE-2014-4424)

  - A restriction bypass flaw exists in the Mail Server due     to SCAL changes being cached and not enforced until the     service had restarted. This can allow an authenticated     remote attacker to bypass those restrictions.
    (CVE-2014-4446)

  - A password disclosure flaw exists in the Profile Manager     due to passwords being potentially saved to a file when     editing or setting up a profile. This can allow a local     attacker to gain access to password information.
    (CVE-2014-4447)

The remote Mac OS X 10.9 host has a version of OS X Server installed that is prior to version 3.2.1. It is, therefore, affected by the following vulnerabilities :

  - Multiple vulnerabilities exist within the included     PostgreSQL, the more serious of these allow remote code     execution or denial of service. (CVE-2014-0060,     CVE-2014-0061, CVE-2014-0062, CVE-2014-0063,     CVE-2014-0064, CVE-2014-0065, CVE-2014-0066)

  - A cross-site scripting vulnerability exists within the     Xcode Server. Using a specially crafted website, a     remote attacker can exploit this to execute arbitrary     code within the server / browser trust relationship.
    (CVE-2014-4406)

  - A SQL injection vulnerability exists in the Wiki Server     due to the improper validation of SQL queries. A remote     attacker can exploit this to inject or manipulate SQL     queries on the back-end database. (CVE-2014-4424)

The remote Mac OS X 10.8 host has a version of OS X Server installe that is prior to 2.2.3. It is, therefore, affected by a SQL injection vulnerability in the Wiki Server component due to improper validation of user-supplied input. A remote attacker can exploit this to inject or manipulate SQL queries on the back-end database.

ID	Name	Product	Family	Type	Severity
78601	Mac OS X : OS X Server < 4.0 Multiple Vulnerabilities (POODLE)	Nessus	MacOS X Local Security Checks	Local	medium
77758	Mac OS X : OS X Server < 3.2.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high
77757	Mac OS X : OS X Server < 2.2.3 Wiki SQL Injection	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2014-4424

critical

Tenable Plugins

medium

high

high