Mac OS X Multiple Vulnerabilities (Security Update 2013-004)
critical Nessus Plugin ID 69878
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote host is missing a Mac OS X update that fixes several security issues.Description
The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-004 applied. This update contains several security-related fixes for the following component :- Apache
- Bind
- Certificate Trust Policy
- ClamAV
- Installer
- IPSec
- Mobile Device Management
- OpenSSL
- PHP
- PostgreSQL
- QuickTime
- sudo
Note that successful exploitation of the most serious issues could result in arbitrary code execution.
Solution
Install Security Update 2013-004 or later.See Also
http://support.apple.com/kb/HT5880
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Plugin Details
Severity: Critical
ID: 69878
File Name: macosx_SecUpd2013-004.nasl
Version: 1.18
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 9/13/2013
Updated: 7/14/2018
Dependencies: ssh_get_info.nasl
Risk Information
VPR
Risk Factor: Critical
Score: 9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Temporal Vector: E:F/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/o:apple:mac_os_x
Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, Host/MacOSX/packages/boms
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/12/2013
Vulnerability Publication Date: 4/16/2012
Exploitable With
CANVAS (CANVAS)
Metasploit (Mac OS X Sudo Password Bypass)
Reference Information
CVE: CVE-2012-0883, CVE-2012-2686, CVE-2012-2687, CVE-2012-3499, CVE-2012-3817, CVE-2012-4244, CVE-2012-4558, CVE-2012-5166, CVE-2012-5688, CVE-2013-0166, CVE-2013-0169, CVE-2013-1027, CVE-2013-1028, CVE-2013-1030, CVE-2013-1032, CVE-2013-1635, CVE-2013-1643, CVE-2013-1775, CVE-2013-1824, CVE-2013-1899, CVE-2013-1900, CVE-2013-1901, CVE-2013-1902, CVE-2013-1903, CVE-2013-2020, CVE-2013-2021, CVE-2013-2110, CVE-2013-2266
BID: 53046, 54658, 55131, 55522, 55852, 56817, 57755, 57778, 58165, 58203, 58224, 58736, 58766, 58876, 58877, 58878, 58879, 58882, 59434, 60118, 60268, 60411, 62370, 62371, 62373, 62375, 62377