The remote host is missing Security Update 2004-09-30.  This security update contains a number of fixes for the following programs :

  - AFP Server
  - CUPS
  - NetInfoManager
  - postfix
  - QuickTime
  - ServerAdmin

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

The remote host is missing Security Update 2004-09-16.

This security update is for iChat. There is a bug in older versions of iChat where an attacker may execute commands on the local system by sending malformed links which will execute local commands to an iChat user on the remote host.

The remote host is missing Security Update 2004-09-07.  This security update fixes the following components :

  - CoreFoundation
  - IPSec
  - Kerberos
  - libpcap
  - lukemftpd
  - NetworkConfig
  - OpenLDAP
  - OpenSSH
  - PPPDialer
  - rsync
  - Safari
  - tcpdump

These applications contain multiple vulnerabilities that may allow a remote attacker to execute arbitrary code.

The remote Mac OS X host is missing Security Update 2003-12-19.

Mac OS X contains a flaw that may allow a malicious user with local access to gain root access. 

The issue is triggered when the Ctrl and c keys are pressed on the connected USB keyboard during boot and thus interrupting the system initialization. 

It is possible that the flaw may allow root access resulting in a loss of integrity.

The remote host is missing Security Update 2004-08-09.

libpng is a library used for manipulating graphics files.  Several buffer overflows have been discovered in libpng.  A remote attacker could exploit these vulnerabilities by tricking a user into opening a maliciously crafted PNG file, resulting in the execution of arbitrary code.

The remote host is missing Security Update 2004-06-07.  This security update includes fixes for the following components :

  DiskImages   LaunchServices   Safari   Terminal

This update fixes a security problem which may allow an attacker to execute arbitrary commands the on the remote host by abusing of a flaw in Safari and the components listed above. To exploit this flaw, an attacker would need to set up a rogue web site with malformed HTML links, and lure the user of the remote host into visiting them.

The remote host is missing Security Update 2004-05-24.  This security update includes fixes for the following components :

  HelpViewer   Terminal

This update fixes security issues that could allow an attacker to execute arbitrary commands on the remote host by exploiting a flaw in Safari and the components listed above.  A remote attacker could exploit this flaw by tricking a user into visiting a malicious website.

The remote host is missing Security Update 2004-05-03.
This security update includes updates for AFP Server, CoreFoundation, and IPSec.

It also includes Security Update 2004-04-05, which includes updates for CUPS, libxml2, Mail, and OpenSSL.

For Mac OS X 10.2.8, it also includes updates for Apache 1.3, cd9660.util, Classic, CUPS, Directory Services, DiskArbitration, fetchmail, fs_usage, gm4, groff, Mail, OpenSSL, Personal File Sharing, PPP, rsync, Safari, System Configuration, System Initialization, and zlib.

This update fixes various issues which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Security Update 2004-01-26.

This security update includes the following components :

 - Apache 1.3
 - Classic
 - Mail
 - Safari
 - Windows File Sharing

For MacOS 10.1.5, it only includes the following :

 - Mail

This update contains various fixes which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Security Update 2003-12-19.

This security update includes the following components :

 - AFP Server
 - cd9600.util
 - Directory Services
 - fetchmail
 - fs_usage
 - rsync
 - System Initialization

For MacOS X 10.3, it also includes :

 - ASN.1 Decoding for PKI

This update contains various fixes which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Mac OS X Security Update 2003-12-05. This update fixes a flaw in the Safari web browser that may allow a rogue website to access the web cookies of the user of the remote host.

The remote host is missing Mac OS X Security Update 2003-11-04.  This update fixes a flaw in the Terminal application that may allow a rogue web site to access the web cookies of the user of the remote host.

The remote host is running a version of Mac OS X that is older than 10.3.4.  Such versions contain several flaws that may allow an attacker to execute arbitrary commands on the remote system with root privileges.

ID	Name	Severity
15420	Mac OS X Multiple Vulnerabilities (Security Update 2004-09-30)	high
14768	Mac OS X iChat Link Handling Arbitrary Command Execution (Security Update 2004-09-16)	medium
14676	Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)	high
14251	Apple Mac OS X USB Keyboard Ctrl Key Root Access (Apple SA 2003-12-19)	high
14242	Mac OS X Multiple Vulnerabilities (Security Update 2004-08-09)	medium
12520	Mac OS X Multiple Vulnerabilities (Security Update 2004-06-07)	medium
12519	Mac OS X Multiple Vulnerabilities (Security Update 2004-05-24)	medium
12518	Mac OS X Multiple Vulnerabilities (Security Update 2004-05-03)	high
12517	Mac OS X Multiple Vulnerabilities (Security Update 2004-01-26)	critical
12516	Mac OS X Multiple Vulnerabilities (Security Update 2003-12-19)	critical
12515	Mac OS X Safari Null Character Cookie Theft (Security Update 2003-12-05)	medium
12514	Mac OS X Terminal Application Unspecified Issue (Security Update 2003-11-04)	medium
12257	Mac OS X < 10.3.4 Multiple Vulnerabilities	critical

Detections

Analytics

MacOS X Local Security Checks Family for Nessus

high

medium

high

high

medium

medium

medium

high

critical

critical

medium

medium

critical