Detections
Analytics

Mac OS X Safari Null Character Cookie Theft (Security Update 2003-12-05)

medium Nessus Plugin ID 12515

Synopsis

The remote host is missing a Mac OS X security update.

Description

The remote host is missing Mac OS X Security Update 2003-12-05. This update fixes a flaw in the Safari web browser that may allow a rogue website to access the web cookies of the user of the remote host.

Solution

Install security update 2003-12-05.

See Also

http://www.nessus.org/u?f26343c2

Plugin Details

Severity: Medium

ID: 12515

File Name: macosx_SecUpd20031205.nasl

Version: 1.16

Type: local

Agent: macosx

Published: 7/6/2004

Updated: 5/28/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x:10.2, cpe:/o:apple:mac_os_x:10.3

Required KB Items: Host/MacOSX/packages

Exploit Ease: No known exploits are available

Patch Publication Date: 11/15/2002

Vulnerability Publication Date: 11/25/2003

Reference Information

CVE: CVE-2003-0975

BID: 9065