Mac OS X Multiple Vulnerabilities (Security Update 2008-002)
critical Nessus Plugin ID 31605
Synopsis
The remote host is missing a Mac OS X update that fixes various security issues.Description
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied.This update contains several security fixes for a number of programs.
Solution
Install Security Update 2008-002 or later.See Also
http://docs.info.apple.com/article.html?artnum=307562
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Plugin Details
Severity: Critical
ID: 31605
File Name: macosx_SecUpd2008-002.nasl
Version: 1.38
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 3/19/2008
Updated: 7/14/2018
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Temporal Vector: E:F/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/o:apple:mac_os_x
Required KB Items: Host/MacOSX/packages, Host/uname
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/24/2007
Vulnerability Publication Date: 6/2/2007
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (ClamAV Milter Blackhole-Mode Remote Code Execution)
Reference Information
CVE: CVE-2005-3352, CVE-2005-4077, CVE-2006-3334, CVE-2006-3747, CVE-2006-5793, CVE-2006-6481, CVE-2007-0897, CVE-2007-0898, CVE-2007-1659, CVE-2007-1660, CVE-2007-1661, CVE-2007-1662, CVE-2007-1745, CVE-2007-1997, CVE-2007-2445, CVE-2007-2799, CVE-2007-3378, CVE-2007-3725, CVE-2007-3799, CVE-2007-3847, CVE-2007-4510, CVE-2007-4560, CVE-2007-4568, CVE-2007-4752, CVE-2007-4766, CVE-2007-4767, CVE-2007-4768, CVE-2007-4887, CVE-2007-4990, CVE-2007-5000, CVE-2007-5266, CVE-2007-5267, CVE-2007-5268, CVE-2007-5269, CVE-2007-5795, CVE-2007-5901, CVE-2007-5958, CVE-2007-5971, CVE-2007-6109, CVE-2007-6203, CVE-2007-6335, CVE-2007-6336, CVE-2007-6337, CVE-2007-6388, CVE-2007-6421, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0005, CVE-2008-0006, CVE-2008-0044, CVE-2008-0045, CVE-2008-0046, CVE-2008-0047, CVE-2008-0048, CVE-2008-0049, CVE-2008-0050, CVE-2008-0051, CVE-2008-0052, CVE-2008-0053, CVE-2008-0054, CVE-2008-0055, CVE-2008-0056, CVE-2008-0057, CVE-2008-0058, CVE-2008-0059, CVE-2008-0060, CVE-2008-0062, CVE-2008-0063, CVE-2008-0318, CVE-2008-0596, CVE-2008-0728, CVE-2008-0882, CVE-2008-0987, CVE-2008-0988, CVE-2008-0989, CVE-2008-0990, CVE-2008-0992, CVE-2008-0993, CVE-2008-0994, CVE-2008-0995, CVE-2008-0996, CVE-2008-0997, CVE-2008-0998, CVE-2008-0999, CVE-2008-1000
BID: 19204, 21078, 24268, 25398, 25439, 25489, 25498, 26346, 26750, 26838, 26927, 26946, 27234, 27236, 27751, 27988, 28278, 28303, 28304, 28307, 28320, 28323, 28334, 28339, 28340, 28341, 28343, 28344, 28345, 28357, 28358, 28359, 28363, 28364, 28365, 28367, 28368, 28371, 28371, 28372, 28374, 28375, 28384, 28385, 28386, 28387, 28388, 28389