Detections
Analytics
Mac OS X 10.8.x < 10.8.5 Multiple Vulnerabilities
critical Nessus Plugin ID 69877
Language:
Synopsis
The remote host is missing a Mac OS X update that fixes several security issues.Description
The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.5. The newer version contains multiple security-related fixes for the following components :- Apache
- Bind
- Certificate Trust Policy
- CoreGraphics
- ImageIO
- Installer
- IPSec
- Kernel
- Mobile Device Management
- OpenSSL
- PHP
- PostgreSQL
- Power Management
- QuickTime
- Screen Lock
- sudo
This update also addresses an issue in which certain Unicode strings could cause applications to unexpectedly quit.
Note that successful exploitation of the most serious issues could result in arbitrary code execution.
Solution
Upgrade to Mac OS X 10.8.5 or later.See Also
http://support.apple.com/kb/HT5880
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Plugin Details
Severity: Critical
ID: 69877
File Name: macosx_10_8_5.nasl
Version: 1.20
Type: combined
Agent: macosx
Family: MacOS X Local Security Checks
Published: 9/13/2013
Updated: 5/28/2024
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:apple:mac_os_x:10.8
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/12/2013
Vulnerability Publication Date: 4/16/2012
Exploitable With
CANVAS (CANVAS)
Metasploit (Mac OS X Sudo Password Bypass)
Reference Information
CVE: CVE-2012-0883, CVE-2012-2686, CVE-2012-2687, CVE-2012-3499, CVE-2012-3817, CVE-2012-4244, CVE-2012-4558, CVE-2012-5166, CVE-2012-5688, CVE-2013-0166, CVE-2013-0169, CVE-2013-1025, CVE-2013-1026, CVE-2013-1027, CVE-2013-1028, CVE-2013-1029, CVE-2013-1030, CVE-2013-1031, CVE-2013-1032, CVE-2013-1033, CVE-2013-1635, CVE-2013-1643, CVE-2013-1775, CVE-2013-1824, CVE-2013-1899, CVE-2013-1900, CVE-2013-1901, CVE-2013-1902, CVE-2013-1903, CVE-2013-2110, CVE-2013-2266
BID: 53046, 54658, 55131, 55522, 55852, 56817, 57755, 57778, 58165, 58203, 58224, 58736, 58766, 58876, 58877, 58878, 58879, 58882, 60268, 60411, 62368, 62369, 62370, 62371, 62373, 62374, 62375, 62377, 62378, 62381, 62382