CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

The remote Mac OS X host is running a version of Safari that is older than version 3.1. The remote version of this software contains several security vulnerabilities that may allow an attacker to execute arbitrary code or a cross-site scripting attack on the remote host.  To exploit these flaws, an attacker would need to convince a victim to visit a rogue web site or open a malicious HTML file.

ID	Name	Product	Family	Severity
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	critical
4434	Safari < 3.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
800994	Mac OS X Safari < 3.1 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-0050

high

Tenable Plugins

critical

high

high