Detections
Analytics

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 5227

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products :

- Adaptive Firewall

 - Apache

 - Apache Protable Runtime

 - Certificate Assistant

 - CoreMedia

 - CUPS

 - DoveCot

 - fetchmail

 - file

 - FTP Server

 - Help Viewer

 - ImageIO

 - IOKit

 - IPSec

 - Kernel

 - Launch Services

 - libsecurity

 - libxml

 Login Window

 - OpenLDAP

 - QuickDraw Manager

QuickTime

 - Screen Sharing

 - Subversion

Solution

Upgrade to Mac OS X 10.6.2 or later.

See Also

http://support.apple.com/kb/HT3937

Plugin Details

Severity: Critical

ID: 5227

Family: Generic

Published: 11/10/2009

Updated: 3/6/2019

Nessus ID: 42434

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Patch Publication Date: 11/9/2009

Vulnerability Publication Date: 11/9/2009

Reference Information

CVE: CVE-2009-0023, CVE-2009-1191, CVE-2009-1195, CVE-2009-1574, CVE-2009-1632, CVE-2009-1890, CVE-2009-1891, CVE-2009-1955, CVE-2009-1956, CVE-2009-2202, CVE-2009-2203, CVE-2009-2285, CVE-2009-2408, CVE-2009-2411, CVE-2009-2412, CVE-2009-2414, CVE-2009-2416, CVE-2009-2666, CVE-2009-2798, CVE-2009-2799, CVE-2009-2808, CVE-2009-2809, CVE-2009-2810, CVE-2009-2818, CVE-2009-2819, CVE-2009-2820, CVE-2009-2823, CVE-2009-2824, CVE-2009-2825, CVE-2009-2826, CVE-2009-2827, CVE-2009-2828, CVE-2009-2829, CVE-2009-2830, CVE-2009-2831, CVE-2009-2832, CVE-2009-2833, CVE-2009-2834, CVE-2009-2835, CVE-2009-2836, CVE-2009-2837, CVE-2009-2838, CVE-2009-2839, CVE-2009-2840, CVE-2009-3225

BID: 35221, 35888, 36956, 36963, 36964, 36974, 36975, 36977, 36979, 36983, 36984, 36985, 36987, 36990