遠端 Mac OS X Server Web Services 安裝包含一個 Wiki Server 元件版本，其因建立使用者網誌期間無法檢查服務存取控制清單 (SACL)，受到一個安全性繞過弱點影響。經驗證的遠端攻擊者可惡意利用此弱點，將內容發佈至 Wiki Server。

The remote Mac OS X Server Web Services installation contains a version of the Wiki Server component that is affected by a security bypass vulnerability due to a failure to check the service access control lists (SACLs) during the creation of a user's weblog. An authenticated, remote attacker can exploit this to publish content to the Wiki Server.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3.

Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server
  - Apache
  - CoreAudio
  - CoreMedia
  - CoreTypes
  - CUPS
  - DesktopServices
  - Disk Images
  - Directory Services
  - Dovecot
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - ImageIO
  - Image RAW
  - Libsystem
  - Mail
  - MySQL
  - OS Services
  - Password Server
  - PHP
  - Podcast Producer
  - Preferences
  - PS Normalizer
  - QuickTime
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - Wiki Server
  - X11

リモートの Mac OS X Server Web Services のインストールに、セキュリティバイパスの脆弱性の影響を受けるバージョンの Wiki サーバーコンポーネントがあります。これは、ユーザーの weblog 作成中に、サービスアクセスコントロールリスト（SACL）がチェックされないことが原因です。認証されたリモートの攻撃者がこれを悪用して、Wiki サーバーにコンテンツを公開する可能性があります。

リモートホストが、バージョン 10.6.3 より前の Mac OS X 10.6.x を実行しています。

Mac OS X 10.6.3 は以下の製品のセキュリティ修復を含んでいます：

- AFP Server
 - Apache
 - CoreAudio
 - CoreMedia
 - CoreTypes
 - CUPS
 - DesktopServices
 - Disk Images
 - Directory Services
 - Dovecot
 - Event Monitor
 - FreeRADIUS
 - FTP Server
 - iChat Server
 - ImageIO
 - Image RAW
 - Libsystem
 - Mail
 - MySQL
 - OS Services
 - Password Server
 - PHP
 - Podcast Producer
 - Preferences
 - PS Normalizer
 - QuickTime
 - Ruby
 - Server Admin
 - SMB
 - Tomcat
 - Wiki Server
 - X11

远程 Mac OS X Server Web Services 安装项目包含一个受到安全绕过漏洞影响的 Wiki Server 组件版本，造成此漏洞的原因是创建用户网络日志期间无法检查服务访问控制列表 (SACL)。经认证的远程攻击者可利用此漏洞将内容发布到 Wiki Server。

远程主机运行的 Mac OS X 10.6.x 版本低于 10.6.3。Mac OS X 10.6.3 含有下列产品的安全修复：- AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor - FreeRADIUS - FTP Server - iChat Server - ImageIO - Image RAW - Libsystem - Mail - MySQL - OS Services - Password Server - PHP - Podcast Producer - Preferences - PS Normalizer - QuickTime - Ruby - Server Admin - SMB - Tomcat - Wiki Server - X11

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

ID	Name	Product	Family	Published	Updated	Severity
45440	Apple Mac OS X Wiki Server 網誌 SACL 安全性繞過	Nessus	CGI abuses	4/8/2010	7/17/2018	medium
45440	Apple Mac OS X Wiki Server Weblog SACL Security Bypass	Nessus	CGI abuses	4/8/2010	7/17/2018	medium
45372	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	3/29/2010	5/28/2024	critical
45440	Apple Mac OS X Wiki Server Weblog SACL セキュリティバイパス	Nessus	CGI abuses	4/8/2010	7/17/2018	medium
45372	Mac OS X 10.6.x < 10.6.3 の複数の脆弱性	Nessus	MacOS X Local Security Checks	3/29/2010	5/28/2024	critical
45440	Apple Mac OS X Wiki Server 网络日志 SACL 安全绕过	Nessus	CGI abuses	4/8/2010	7/17/2018	medium
45372	Mac OS X 10.6.x < 10.6.3 多种漏洞	Nessus	MacOS X Local Security Checks	3/29/2010	5/28/2024	critical
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	3/30/2010	3/6/2019	critical

Detections

Analytics

Plugins Search

medium

medium

critical

medium

critical

medium

critical

critical