The remote host is running Apple Mac OS X, but lacks Security Update 2005-009.

This security update contains fixes for the following applications :

- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog

The remote host appears to be running a version of Apache, an open source web server.  This version of Apache is vulnerable to a flaw in the way that it handles malformed HTTP requests.  An attacker exploiting this flaw would be able to possibly corrupt cache memory or inject HTML requests to a vulnerable Apache server.  The vulnerability stems from a non-conformance to RFC 2616 that states that HTTP requests must not include both a 'Content-Length' and 'Transfer-Encoding' field.   

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications :
- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog 

The remote host appears to be running a version of Apache, an open source web server.  This version of Apache is vulnerable to a flaw in the way that it handles mod_ssl CRL verification callback.  In order for an attacker to exploit this flaw the attacker would need to find a server that was configured to use a malicious certificate revocation list (CRL). 

ID	Name	Product	Family	Published	Updated	Severity
20249	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus	MacOS X Local Security Checks	11/30/2005	5/28/2024	high
3042	Apache HTTP Request Parsing HTML Injection	Nessus Network Monitor	Web Servers	6/30/2005	3/6/2019	high
3308	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus Network Monitor	Operating System Detection	11/30/2005	3/6/2019	high
3112	Apache < 2.0.55 HTTP Smuggling Vulnerability	Nessus Network Monitor	Web Servers	7/25/2005	3/6/2019	high

Detections

Analytics

Plugins Search

high

high

high

high