Detections
Analytics

Mac OS X Multiple Vulnerabilities (Security Update 2007-002)

critical Nessus Plugin ID 24354

Synopsis

The remote host is missing a Mac OS X update which fixes several security issues.

Description

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2007-002 applied.

This update fixes security flaws in the following applications :

- Finder
- iChat
- UserNotification

Solution

Install Security Update 2007-002 :

http://www.apple.com/support/downloads/securityupdate2007002universal.html http://www.apple.com/support/downloads/securityupdate2007002panther.html

See Also

http://www.nessus.org/u?22a97335

Plugin Details

Severity: Critical

ID: 24354

File Name: macosx_SecUpd2007-002.nasl

Version: 1.17

Type: local

Agent: macosx

Published: 2/16/2007

Updated: 5/28/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x:10.4

Required KB Items: Host/MacOSX/packages

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/15/2007

Vulnerability Publication Date: 1/9/2007

Reference Information

CVE: CVE-2007-0021, CVE-2007-0023, CVE-2007-0197, CVE-2007-0613, CVE-2007-0614, CVE-2007-0710

BID: 21980, 22188, 22304, 22146

CWE: 119, 20, 399