The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3.

Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server
  - Apache
  - CoreAudio
  - CoreMedia
  - CoreTypes
  - CUPS
  - DesktopServices
  - Disk Images
  - Directory Services
  - Dovecot
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - ImageIO
  - Image RAW
  - Libsystem
  - Mail
  - MySQL
  - OS Services
  - Password Server
  - PHP
  - Podcast Producer
  - Preferences
  - PS Normalizer
  - QuickTime
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - Wiki Server
  - X11

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied.

This security update contains fixes for the following products :

  - AppKit
  - Application Firewall
  - AFP Server
  - Apache
  - ClamAV
  - CoreTypes
  - CUPS
  - curl
  - Cyrus IMAP
  - Cyrus SASL
  - Disk Images
  - Directory Services
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - Image RAW
  - Libsystem
  - Mail
  - Mailman
  - OS Services
  - Password Server
  - perl
  - PHP
  - PS Normalizer
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - unzip
  - vim
  - Wiki Server
  - X11
  - xar

Some vulnerabilities were discovered and corrected in php-5.3.1 :

  - Added max_file_uploads INI directive, which can be set     to limit the number of file uploads per-request to 20 by     default, to prevent possible DOS via temporary file     exhaustion. (Ilia)

  - Added missing sanity checks around exif processing.
    (CVE-2009-3292, Ilia)

  - Fixed a safe_mode bypass in tempnam() identified by     Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)

  - Fixed a open_basedir bypass in posix_mkfifo() identified     by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)

  - Fixed bug #50063 (safe_mode_include_dir fails).
    (CVE-2009-3559, Johannes, christian at elmerot dot se)

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

According to its banner, the version of PHP 5.3 installed on the remote host is older than 5.3.1.  Such versions may be affected by several security issues :

  - Sanity checks are missing in exif processing.

  - It is possible to bypass the 'safe_mode' configuration     setting using 'tempnam()'.

  - It is possible to bypass the 'open_basedir'     configuration setting using 'posix_mkfifo()'.

  - The 'safe_mode_include_dir' configuration setting may     be ignored. (Bug #50063)

  - Calling 'popen()' with an invalid mode can cause a     crash under Windows. (Bug #44683)

  - Provided file uploading is enabled (it is by default),     an attacker can upload files using a POST request with     'multipart/form-data' content even if the target script     doesn't actually support file uploads per se. By     supplying a large number (15,000+) of files, an attacker     could cause the web server to stop responding while it     processes the file list.

  - 'proc_open()' can bypass 'safe_mode_protected_env_vars'.
    (Bug #49026)

  - An unspecified vulnerability affects the LCG entropy.

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

According to its banner, the version of PHP 5.3.x installed on the remote host is earlier than 5.3.1.  Such versions are potentially affected by multiple issues : 

  - Sanity checks are missing in exif processing.

  - It is possible to bypass the 'safe_mode' configuration setting using 'tempnam()'.

  - It is possible to bypass the 'open_basedir' configuration setting using 'posix_mkfifo()'.

  - The 'safe_mode_include_dir' configuration setting may be ignored.

  - Calling 'popen()' with an invalid mode can cause a crash.

  - A safe_mode restriction-bypass vulnerability because environment variables specified for 'proc_open' are passed without checking them.

ID	Name	Product	Family	Published	Updated	Severity
45372	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	3/29/2010	5/28/2024	critical
45373	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	Nessus	MacOS X Local Security Checks	3/29/2010	5/28/2024	critical
48158	Mandriva Linux Security Advisory : php (MDVSA-2009:302)	Nessus	Mandriva Local Security Checks	7/30/2010	1/6/2021	high
42862	PHP 5.3 < 5.3.1 Multiple Vulnerabilities	Nessus	CGI abuses	11/20/2009	11/22/2024	medium
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	3/30/2010	3/6/2019	critical
5242	PHP 5.3.x < 5.3.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	11/25/2009	3/6/2019	high

Detections

Analytics

Plugins Search

critical

critical

high

medium

critical

high