Detections
Analytics

Mac OS X Multiple Vulnerabilities (Security Update 2004-06-07)

medium Nessus Plugin ID 12520

Synopsis

The remote host is missing a Mac OS X update that fixes a security issue.

Description

The remote host is missing Security Update 2004-06-07. This security update includes fixes for the following components :

 DiskImages LaunchServices Safari Terminal

This update fixes a security problem which may allow an attacker to execute arbitrary commands the on the remote host by abusing of a flaw in Safari and the components listed above. To exploit this flaw, an attacker would need to set up a rogue web site with malformed HTML links, and lure the user of the remote host into visiting them.

Solution

Install Security Update 2004-06-07.

See Also

http://support.apple.com/kb/HT1646

Plugin Details

Severity: Medium

ID: 12520

File Name: macosx_SecUpd20040607.nasl

Version: 1.21

Type: local

Agent: macosx

Published: 7/6/2004

Updated: 5/28/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x:10.2, cpe:/o:apple:mac_os_x:10.3

Required KB Items: Host/MacOSX/packages

Exploit Ease: No known exploits are available

Patch Publication Date: 5/13/2004

Vulnerability Publication Date: 6/7/2004

Reference Information

CVE: CVE-2004-0538, CVE-2004-0539

BID: 10486