Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.

apache_mod_php
CoreTypes
LaunchServices
Mail
Safari
rsync

The remote host is running Apple Mac OS X, but lacks Security Update 2006-002.

This security update contains fixes for the following applications :

apache_mod_php CoreTypes LaunchServices Mail Safari rsync

ID	Name	Product	Family	Severity
3475	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus Network Monitor	Operating System Detection	high
3474	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus Network Monitor	Operating System Detection	high
21073	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus	MacOS X Local Security Checks	high
800805	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Log Correlation Engine	Operating System Detection	high

Detections

Analytics

CVE-2006-0397

medium

Tenable Plugins

high

high

high

high