The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied.
This update contains several security fixes for the following programs :
#
# (C) Tenable Network Security, Inc.
#
if ( ! defined_func("bn_random") ) exit(0);
if ( NASL_LEVEL < 3000 ) exit(0);
include("compat.inc");
if(description)
{
script_id(25830);
script_version ("1.18");
script_cvs_date("Date: 2018/07/14 1:59:35");
script_cve_id("CVE-2004-0996", "CVE-2004-2541", "CVE-2005-0758", "CVE-2005-2090", "CVE-2005-3128",
"CVE-2006-2842", "CVE-2006-3174", "CVE-2006-4019", "CVE-2006-6142", "CVE-2007-0450",
"CVE-2007-0478", "CVE-2007-1001", "CVE-2007-1262", "CVE-2007-1287", "CVE-2007-1358",
"CVE-2007-1460", "CVE-2007-1461", "CVE-2007-1484", "CVE-2007-1521", "CVE-2007-1583",
"CVE-2007-1711", "CVE-2007-1717", "CVE-2007-1860", "CVE-2007-2403", "CVE-2007-2404",
"CVE-2007-2405", "CVE-2007-2406", "CVE-2007-2407", "CVE-2007-2408", "CVE-2007-2409",
"CVE-2007-2410", "CVE-2007-2442", "CVE-2007-2443", "CVE-2007-2446", "CVE-2007-2447",
"CVE-2007-2589", "CVE-2007-2798", "CVE-2007-3742", "CVE-2007-3744", "CVE-2007-3745",
"CVE-2007-3746", "CVE-2007-3747", "CVE-2007-3748", "CVE-2007-3944");
script_bugtraq_id(11697, 13582, 23910, 23972, 23973, 24195, 24196, 24197, 24198, 24653, 25159);
script_name(english:"Mac OS X Multiple Vulnerabilities (Security Update 2007-007)");
script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a Mac OS X update that fixes various
security issues." );
script_set_attribute(attribute:"description", value:
"The remote host is running a version of Mac OS X 10.4 or 10.3 which
does not have the security update 2007-007 applied.
This update contains several security fixes for the following programs :
- bzip2
- CFNetwork
- CoreAudio
- cscope
- gnuzip
- iChat
- Kerberos
- mDNSResponder
- PDFKit
- PHP
- Quartz Composer
- Samba
- SquirrelMail
- Tomcat
- WebCore
- WebKit" );
script_set_attribute(attribute:"see_also", value:"http://docs.info.apple.com/article.html?artnum=306172" );
script_set_attribute(attribute:"solution", value:
"Install the security update 2007-007 :
http://www.apple.com/support/downloads/securityupdate200700710410universal.html
http://www.apple.com/support/downloads/securityupdate20070071039.html
http://www.apple.com/support/downloads/securityupdate20070071039server.html" );
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploit_framework_core", value:"true");
script_set_attribute(attribute:"metasploit_name", value:'Samba "username map script" Command Execution');
script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
script_set_attribute(attribute:"exploit_framework_canvas", value:"true");
script_set_attribute(attribute:"canvas_package", value:'CANVAS');
script_cwe_id(16, 20, 22, 59, 79, 119, 352);
script_set_attribute(attribute:"plugin_publication_date", value: "2007/08/02");
script_set_attribute(attribute:"patch_publication_date", value: "2007/08/01");
script_set_attribute(attribute:"vuln_publication_date", value: "2004/11/09");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x");
script_end_attributes();
script_summary(english:"Check for the presence of the SecUpdate 2007-007");
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2007-2018 Tenable Network Security, Inc.");
script_family(english:"MacOS X Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/MacOSX/packages");
exit(0);
}
packages = get_kb_item("Host/MacOSX/packages");
if ( ! packages ) exit(0);
uname = get_kb_item("Host/uname");
if ( egrep(pattern:"Darwin.* (7\.[0-9]\.|8\.[0-9]\.|8\.10\.)", string:uname) )
{
if (!egrep(pattern:"^SecUpd(Srvr)?(2007-00[789]|200[89]-|20[1-9][0-9]-)", string:packages))
security_hole(0);
}
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0996
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2541
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0758
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2090
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3128
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2842
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4019
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6142
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0450
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0478
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1262
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1287
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1358
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1460
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1461
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1484
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1521
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1583
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1711
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1717
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1860
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2403
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2404
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2405
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2406
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2407
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2408
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2409
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2410
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2442
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2443
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2446
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2447
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2589
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2798
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3742
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3744
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3745
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3746
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3747
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3748
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3944
docs.info.apple.com/article.html?artnum=306172