Mac OS X Multiple Vulnerabilities (Security Update 2008-002)

Critical Nessus Plugin ID 31605

Synopsis

The remote host is missing a Mac OS X update that fixes various security issues.

Description

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied.

This update contains several security fixes for a number of programs.

Solution

Install Security Update 2008-002 or later.

See Also

http://docs.info.apple.com/article.html?artnum=307562

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

http://www.securityfocus.com/advisories/14242

Plugin Details

Severity: Critical

ID: 31605

File Name: macosx_SecUpd2008-002.nasl

Version: 1.38

Type: local

Agent: macosx

Published: 2008/03/19

Updated: 2018/07/14

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Required KB Items: Host/MacOSX/packages, Host/uname

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2007/08/24

Vulnerability Publication Date: 2007/06/02

Exploitable With

CANVAS (CANVAS)

Core Impact

Metasploit (ClamAV Milter Blackhole-Mode Remote Code Execution)

Reference Information

CVE: CVE-2005-3352, CVE-2005-4077, CVE-2006-3334, CVE-2006-3747, CVE-2006-5793, CVE-2006-6481, CVE-2007-0897, CVE-2007-0898, CVE-2007-1659, CVE-2007-1660, CVE-2007-1661, CVE-2007-1662, CVE-2007-1745, CVE-2007-1997, CVE-2007-2445, CVE-2007-2799, CVE-2007-3378, CVE-2007-3725, CVE-2007-3799, CVE-2007-3847, CVE-2007-4510, CVE-2007-4560, CVE-2007-4568, CVE-2007-4752, CVE-2007-4766, CVE-2007-4767, CVE-2007-4768, CVE-2007-4887, CVE-2007-4990, CVE-2007-5000, CVE-2007-5266, CVE-2007-5267, CVE-2007-5268, CVE-2007-5269, CVE-2007-5795, CVE-2007-5901, CVE-2007-5958, CVE-2007-5971, CVE-2007-6109, CVE-2007-6203, CVE-2007-6335, CVE-2007-6336, CVE-2007-6337, CVE-2007-6388, CVE-2007-6421, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0005, CVE-2008-0006, CVE-2008-0044, CVE-2008-0045, CVE-2008-0046, CVE-2008-0047, CVE-2008-0048, CVE-2008-0049, CVE-2008-0050, CVE-2008-0051, CVE-2008-0052, CVE-2008-0053, CVE-2008-0054, CVE-2008-0055, CVE-2008-0056, CVE-2008-0057, CVE-2008-0058, CVE-2008-0059, CVE-2008-0060, CVE-2008-0062, CVE-2008-0063, CVE-2008-0318, CVE-2008-0596, CVE-2008-0728, CVE-2008-0882, CVE-2008-0987, CVE-2008-0988, CVE-2008-0989, CVE-2008-0990, CVE-2008-0992, CVE-2008-0993, CVE-2008-0994, CVE-2008-0995, CVE-2008-0996, CVE-2008-0997, CVE-2008-0998, CVE-2008-0999, CVE-2008-1000

BID: 19204, 21078, 24268, 25398, 25439, 25489, 25498, 26346, 26750, 26838, 26927, 26946, 27234, 27236, 27751, 27988, 28278, 28303, 28304, 28307, 28320, 28323, 28334, 28339, 28340, 28341, 28343, 28344, 28345, 28357, 28358, 28359, 28363, 28364, 28365, 28367, 28368, 28371, 28371, 28372, 28374, 28375, 28384, 28385, 28386, 28387, 28388, 28389

CWE: 20, 22, 78, 79, 94, 119, 134, 189, 200, 255, 264, 362, 399