Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

high Nessus Plugin ID 70561

Language:

New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote host is missing a Mac OS X update that fixes multiple security vulnerabilities.

Description

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components :

 - Application Firewall
 - App Sandbox
 - Bluetooth
 - CFNetwork
 - CFNetwork SSL
 - Console
 - CoreGraphics
 - curl
 - dyld
 - IOKitUser
 - IOSerialFamily
 - Kernel
 - Kext Management
 - LaunchServices
 - Libc
 - Mail Accounts
 - Mail Header Display
 - Mail Networking
 - OpenLDAP
 - perl
 - Power Management
 - python
 - ruby
 - Security
 - Security - Authorization
 - Security - Smart Card Services
 - Screen Lock
 - Screen Sharing Server
 - syslog
 - USB

Solution

Upgrade to Mac OS X 10.9 or later.

See Also

http://support.apple.com/kb/HT6011

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

https://www.imperialviolet.org/2011/09/23/chromeandbeast.html

https://www.openssl.org/~bodo/tls-cbc.txt

Plugin Details

Severity: High

ID: 70561

File Name: macosx_10_9.nasl

Version: 1.11

Type: combined

Agent: macosx

Published: 10/23/2013

Updated: 7/14/2018

Dependencies: ssh_get_info.nasl, os_fingerprint.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/22/2013

Vulnerability Publication Date: 8/31/2011

Reference Information

CVE: CVE-2011-2391, CVE-2011-3389, CVE-2011-3427, CVE-2011-4944, CVE-2012-0845, CVE-2012-0876, CVE-2012-1150, CVE-2013-0249, CVE-2013-1667, CVE-2013-1944, CVE-2013-3950, CVE-2013-3954, CVE-2013-4073, CVE-2013-5135, CVE-2013-5138, CVE-2013-5139, CVE-2013-5141, CVE-2013-5142, CVE-2013-5145, CVE-2013-5165, CVE-2013-5166, CVE-2013-5167, CVE-2013-5168, CVE-2013-5169, CVE-2013-5170, CVE-2013-5171, CVE-2013-5172, CVE-2013-5173, CVE-2013-5174, CVE-2013-5175, CVE-2013-5176, CVE-2013-5177, CVE-2013-5178, CVE-2013-5179, CVE-2013-5180, CVE-2013-5181, CVE-2013-5182, CVE-2013-5183, CVE-2013-5184, CVE-2013-5185, CVE-2013-5186, CVE-2013-5187, CVE-2013-5188, CVE-2013-5189, CVE-2013-5190, CVE-2013-5191, CVE-2013-5192, CVE-2013-5229

BID: 49778, 51239, 51996, 52379, 52732, 57842, 58311, 59058, 60437, 60444, 60843, 62520, 62522, 62523, 62529, 62531, 62536, 63284, 63290, 63311, 63312, 63313, 63314, 63316, 63317, 63319, 63320, 63321, 63322, 63329, 63330, 63331, 63332, 63335, 63336, 63339, 63343, 63344, 63345, 63346, 63347, 63348, 63349, 63350, 63351, 63352, 63353

APPLE-SA: APPLE-SA-2013-10-22-3

CERT: 864643