Mac OS X Multiple Vulnerabilities (Security Update 2004-06-07)

Medium Nessus Plugin ID 12520


The remote host is missing a Mac OS X update that fixes a security issue.


The remote host is missing Security Update 2004-06-07. This security update includes fixes for the following components :

DiskImages LaunchServices Safari Terminal

This update fixes a security problem which may allow an attacker to execute arbitrary commands the on the remote host by abusing of a flaw in Safari and the components listed above. To exploit this flaw, an attacker would need to set up a rogue web site with malformed HTML links, and lure the user of the remote host into visiting them.


Install Security Update 2004-06-07.

See Also

Plugin Details

Severity: Medium

ID: 12520

File Name: macosx_SecUpd20040607.nasl

Version: $Revision: 1.19 $

Type: local

Agent: macosx

Published: 2004/07/06

Modified: 2013/03/05

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Required KB Items: Host/MacOSX/packages

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2004/05/13

Vulnerability Publication Date: 2004/06/07

Reference Information

CVE: CVE-2004-0538, CVE-2004-0539

BID: 10486

OSVDB: 8432, 8433