Mac OS X : OS X Server < 4.1 Multiple Vulnerabilities (POODLE)

Medium Nessus Plugin ID 83088

Synopsis

The remote host is missing a security update for OS X Server.

Description

The remote Mac OS X host has a version of OS X Server installed that is prior 4.1. It is, therefore, affected by vulnerabilities in the following components :

- Dovecot
- Firewall
- Postfix
- Wiki Server

Solution

Upgrade to OS X Server version 4.1 or later.

Note that OS X Server 4.1 is available only for OS X 10.10 or later.

See Also

http://support.apple.com/kb/HT204201

https://www.imperialviolet.org/2014/10/14/poodle.html

https://www.openssl.org/~bodo/ssl-poodle.pdf

https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00

Plugin Details

Severity: Medium

ID: 83088

File Name: macosx_server_4_1.nasl

Version: 1.8

Type: local

Agent: macosx

Published: 2015/04/28

Updated: 2019/11/22

Dependencies: 50680

Risk Information

Risk Factor: Medium

CVSS Score Source: CVE-2015-1151

CVSS v2.0

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x_server

Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, MacOSX/Server/Version

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2015/04/24

Vulnerability Publication Date: 2014/10/14

Reference Information

CVE: CVE-2014-3566, CVE-2015-1150, CVE-2015-1151

BID: 70574, 74355, 74356

CERT: 577193

APPLE-SA: APPLE-SA-2015-04-24-1