The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.1. The remote version of this software is vulnerable to an information disclosure flaw when handling Quartz Composer files which may leak data to an arbitrary web location.

To exploit this flaw, an attacker would need to lure a user on the remote host into viewing a specially crafted Quartz Composer object.

The remote host is missing Security Update 2005-006. This security update contains security fixes for the following application :

- AFP Server
- Bluetooth
- CoreGraphics
- Folder Permissions
- launchd
- LaunchServices
- NFS
- PHP
- VPN

These programs have multiple vulnerabilities, some of which may lead to arbitrary code execution.

The remote host contains a version of Keynote 2 which is older than 2.0.2. The installed version is affected by a security issue which may allow an attacker to send a rogue keynote file containing malformed URI links in it. An attacker can exploit this issue to read and upload arbitrary local files to an arbitrary location.

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.1.

Mac OS X 10.4.1 contains several security fixes for :

- Bluetooth
- Dashboard
- Kernel
- SecurityAgent

The remote host is running a version of Mac OS X which is older than version 10.4.

Versions older than 10.4 contain a security issue in the way they handle the permissions of pseudo terminals. 

When an application uses a new pseudo terminal, it can not restrict its permissions to a safe mode. As a result, every created pseudo terminal has permissions 0666 set, which allows a local attacker to sniff the session of other users.

The remote host is running a version of iTunes which is older than version 4.8.0. Such versions reportedly fail to perform certain validation checks on MPEG4 files, and hence it could be possible to trigger a buffer overflow condition. Successful exploitation of this issue could lead to a denial of service condition or arbitrary code execution on the remote system.

The remote host is missing Security Update 2005-005. This security update contains fixes for the following applications :

  - Apache
  - AppKit
  - AppleScript
  - Bluetooth
  - Directory Services
  - Finder
  - Foundation
  - HelpViewer
  - LDAP
  - libXpm
  - lukemftpd
  - NetInfo
  - ServerAdmin
  - sudo
  - Terminal
  - VPN

These programs have multiple vulnerabilities that could allow a remote attacker to execute arbitrary code.

The remote host is missing Security Update 2005-004.  This security update contains security fixes for the following application :

- iSync (local privilege escalation)

The remote host is running a version of Mac OS X 10.3.x that is prior to 10.3.9.

Mac OS X 10.3.9 contains several security fixes for :

  - Safari : a remote local zone script execution     vulnerability has been fixed
  - kernel : multiple local privilege escalation     vulnerabilities have been fixed

The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications :

  - AFP Server
  - Bluetooth Setup Assistant
  - Core Foundation
  - Cyrus IMAP
  - Cyrus SASL
  - Folder Permissions
  - Mailman
  - Safari

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

The remote host is missing Security Update 2005-002. This security update contains a security bugfix for Java 1.4.2.

A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the privileges of the user running the applet.  Releases prior to Java 1.4.2 on Mac OS X are not affected by this vulnerability.

he remote host is missing Security Update 2005-001. This security update contains a number of fixes for the following programs :

  - at commands
  - ColorSync
  - libxml2
  - Mail
  - PHP
  - Safari
  - SquirrelMail

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

The remote host is running a version of iTunes which is older than version 4.7.1.  The remote version of this software is vulnerable to a buffer overflow when it parses a malformed playlist file (.m3u or .pls files).  A remote attacker could exploit this by tricking a user into opening a maliciously crafted file, resulting in arbitrary code execution.

The remote host is missing Security Update 2004-12-02. This security update contains a number of fixes for the following programs :

  - Apache
  - Apache2
  - AppKit
  - Cyrus IMAP
  - HIToolbox
  - Kerberos
  - Postfix
  - PSNormalizer
  - QuickTime Streaming Server
  - Safari
  - Terminal

These programs contain multiple vulnerabilities that could allow a remote attacker to execute arbitrary code.

The remote host is running a version of iCal which is older than version 1.5.4.  Such versions have an arbitrary command execution vulnerability.  A remote attacker could exploit this by tricking a user into opening or importing a new iCal calendar.

The remote Mac OS X host is running a version of Quicktime that is older than Quicktime 6.5.2.

The remote version of this software reportedly fails to check bounds properly when decoding BMP images, leading to a heap overflow.

If a remote attacker can trick a user into opening a maliciously crafted BMP file using the affected application, this issue could be leveraged to execute arbitrary code on the affected host.

The remote host is missing Security Update 2004-09-30.  This security update contains a number of fixes for the following programs :

  - AFP Server
  - CUPS
  - NetInfoManager
  - postfix
  - QuickTime
  - ServerAdmin

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

The remote host is missing Security Update 2004-09-16.

This security update is for iChat. There is a bug in older versions of iChat where an attacker may execute commands on the local system by sending malformed links which will execute local commands to an iChat user on the remote host.

The remote host is missing Security Update 2004-09-07.  This security update fixes the following components :

  - CoreFoundation
  - IPSec
  - Kerberos
  - libpcap
  - lukemftpd
  - NetworkConfig
  - OpenLDAP
  - OpenSSH
  - PPPDialer
  - rsync
  - Safari
  - tcpdump

These applications contain multiple vulnerabilities that may allow a remote attacker to execute arbitrary code.

The remote Mac OS X host is missing Security Update 2003-12-19.

Mac OS X contains a flaw that may allow a malicious user with local access to gain root access. 

The issue is triggered when the Ctrl and c keys are pressed on the connected USB keyboard during boot and thus interrupting the system initialization. 

It is possible that the flaw may allow root access resulting in a loss of integrity.

The remote host is missing Security Update 2004-08-09.

libpng is a library used for manipulating graphics files.  Several buffer overflows have been discovered in libpng.  A remote attacker could exploit these vulnerabilities by tricking a user into opening a maliciously crafted PNG file, resulting in the execution of arbitrary code.

The remote host is missing Security Update 2004-06-07.  This security update includes fixes for the following components :

  DiskImages   LaunchServices   Safari   Terminal

This update fixes a security problem which may allow an attacker to execute arbitrary commands the on the remote host by abusing of a flaw in Safari and the components listed above. To exploit this flaw, an attacker would need to set up a rogue web site with malformed HTML links, and lure the user of the remote host into visiting them.

The remote host is missing Security Update 2004-05-24.  This security update includes fixes for the following components :

  HelpViewer   Terminal

This update fixes security issues that could allow an attacker to execute arbitrary commands on the remote host by exploiting a flaw in Safari and the components listed above.  A remote attacker could exploit this flaw by tricking a user into visiting a malicious website.

The remote host is missing Security Update 2004-05-03.
This security update includes updates for AFP Server, CoreFoundation, and IPSec.

It also includes Security Update 2004-04-05, which includes updates for CUPS, libxml2, Mail, and OpenSSL.

For Mac OS X 10.2.8, it also includes updates for Apache 1.3, cd9660.util, Classic, CUPS, Directory Services, DiskArbitration, fetchmail, fs_usage, gm4, groff, Mail, OpenSSL, Personal File Sharing, PPP, rsync, Safari, System Configuration, System Initialization, and zlib.

This update fixes various issues which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Security Update 2004-01-26.

This security update includes the following components :

 - Apache 1.3
 - Classic
 - Mail
 - Safari
 - Windows File Sharing

For MacOS 10.1.5, it only includes the following :

 - Mail

This update contains various fixes which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Security Update 2003-12-19.

This security update includes the following components :

 - AFP Server
 - cd9600.util
 - Directory Services
 - fetchmail
 - fs_usage
 - rsync
 - System Initialization

For MacOS X 10.3, it also includes :

 - ASN.1 Decoding for PKI

This update contains various fixes which may allow an attacker to execute arbitrary code on the remote host.

The remote host is missing Mac OS X Security Update 2003-12-05. This update fixes a flaw in the Safari web browser that may allow a rogue website to access the web cookies of the user of the remote host.

The remote host is missing Mac OS X Security Update 2003-11-04.  This update fixes a flaw in the Terminal application that may allow a rogue web site to access the web cookies of the user of the remote host.

The remote host is running a version of Mac OS X that is older than 10.3.4.  Such versions contain several flaws that may allow an attacker to execute arbitrary commands on the remote system with root privileges.

ID	Name	Severity
18521	Quicktime < 7.0.1 Quartz Composer Information Disclosure (Mac OS X)	medium
18437	Mac OS X Multiple Vulnerabilities (Security Update 2005-006)	high
18369	Apple Keynote Presentation < 2.0.2 keynote: URI Handler Arbitrary File Access	high
18353	Mac OS X 10.4.x < 10.4.1 Multiple Vulnerabilities	medium
18352	Mac OS X < 10.4 pty Permission Weakness	medium
18214	iTunes < 4.8.0 MPEG-4 Parsing Overflow (Mac OS X)	high
18189	Mac OS X Multiple Vulnerabilities (Security Update 2005-005)	high
18099	Mac OS X Security Update 2005-004	high
18062	Mac OS X 10.3.x < 10.3.9 Multiple Vulnerabilities	high
17587	Mac OS X Multiple Vulnerabilities (Security Update 2005-003)	high
17195	Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002)	medium
16251	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	high
16151	iTunes < 4.7.1	medium
15898	Mac OS X Multiple Vulnerabilities (Security Update 2004-12-02)	high
15786	iCal < 1.5.4	medium
15573	Quicktime < 6.5.2	medium
15420	Mac OS X Multiple Vulnerabilities (Security Update 2004-09-30)	high
14768	Mac OS X iChat Link Handling Arbitrary Command Execution (Security Update 2004-09-16)	medium
14676	Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)	high
14251	Apple Mac OS X USB Keyboard Ctrl Key Root Access (Apple SA 2003-12-19)	high
14242	Mac OS X Multiple Vulnerabilities (Security Update 2004-08-09)	medium
12520	Mac OS X Multiple Vulnerabilities (Security Update 2004-06-07)	medium
12519	Mac OS X Multiple Vulnerabilities (Security Update 2004-05-24)	medium
12518	Mac OS X Multiple Vulnerabilities (Security Update 2004-05-03)	high
12517	Mac OS X Multiple Vulnerabilities (Security Update 2004-01-26)	critical
12516	Mac OS X Multiple Vulnerabilities (Security Update 2003-12-19)	critical
12515	Mac OS X Safari Null Character Cookie Theft (Security Update 2003-12-05)	medium
12514	Mac OS X Terminal Application Unspecified Issue (Security Update 2003-11-04)	medium
12257	Mac OS X < 10.3.4 Multiple Vulnerabilities	critical

Detections

Analytics

MacOS X Local Security Checks Family for Nessus

medium

high

high

medium

medium

high

high

high

high

high

medium

high

medium

high

medium

medium

high

medium

high

high

medium

medium

medium

high

critical

critical

medium

medium

critical