Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

Critical Nessus Plugin ID 38744

Synopsis

The remote host is missing a Mac OS X update that fixes various security issues.

Description

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7.

Mac OS X 10.5.7 contains security fixes for the following products :

 - Apache
 - ATS
 - BIND
 - CFNetwork
 - CoreGraphics
 - Cscope
 - CUPS
 - Disk Images
 - enscript
 - Flash Player plug-in
 - Help Viewer
 - iChat
 - International Components for Unicode
 - IPSec
 - Kerberos
 - Kernel
 - Launch Services
 - libxml
 - Net-SNMP
 - Network Time
 - Networking
 - OpenSSL
 - PHP
 - QuickDraw Manager
 - ruby
 - Safari
 - Spotlight
 - system_cmds
 - telnet
 - Terminal
 - WebKit
 - X11

Solution

Upgrade to Mac OS X 10.5.7 or later.

See Also

http://support.apple.com/kb/HT3549

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Plugin Details

Severity: Critical

ID: 38744

File Name: macosx_10_5_7.nasl

Version: 1.32

Type: local

Agent: macosx

Published: 2009/05/13

Updated: 2018/07/14

Dependencies: 11936, 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2009/05/12

Vulnerability Publication Date: 2005/01/21

Reference Information

CVE: CVE-2004-1184, CVE-2004-1185, CVE-2004-1186, CVE-2008-0456, CVE-2008-1382, CVE-2008-1517, CVE-2008-2371, CVE-2008-2383, CVE-2008-2665, CVE-2008-2666, CVE-2008-2829, CVE-2008-2939, CVE-2008-3443, CVE-2008-3529, CVE-2008-3530, CVE-2008-3651, CVE-2008-3652, CVE-2008-3655, CVE-2008-3656, CVE-2008-3657, CVE-2008-3658, CVE-2008-3659, CVE-2008-3660, CVE-2008-3790, CVE-2008-3863, CVE-2008-4309, CVE-2008-5077, CVE-2008-5557, CVE-2009-0010, CVE-2009-0021, CVE-2009-0025, CVE-2009-0040, CVE-2009-0114, CVE-2009-0144, CVE-2009-0145, CVE-2009-0146, CVE-2009-0147, CVE-2009-0148, CVE-2009-0149, CVE-2009-0150, CVE-2009-0152, CVE-2009-0153, CVE-2009-0154, CVE-2009-0155, CVE-2009-0156, CVE-2009-0157, CVE-2009-0158, CVE-2009-0159, CVE-2009-0160, CVE-2009-0161, CVE-2009-0162, CVE-2009-0164, CVE-2009-0165, CVE-2009-0519, CVE-2009-0520, CVE-2009-0844, CVE-2009-0845, CVE-2009-0846, CVE-2009-0847, CVE-2009-0942, CVE-2009-0943, CVE-2009-0944, CVE-2009-0945, CVE-2009-0946, CVE-2009-1717

BID: 27409, 29796, 30087, 30649, 30657, 31612, 32948, 33769, 33890, 34257, 34408, 34409, 34481, 34550, 34568, 34665, 34805, 34924, 34932, 34937, 34938, 34939, 34941, 34942, 34947, 34948, 34950, 34951, 34952, 34958, 34959, 34962, 34965, 34972, 34973, 34974, 35182

CWE: 16, 20, 22, 79, 94, 119, 189, 200, 264, 287, 399