Mac OS X Multiple Vulnerabilities (Security Update 2011-006)

#
# (C) Tenable Network Security, Inc.
#


if (!defined_func("bn_random")) exit(0);
if (NASL_LEVEL < 3000) exit(0);    # Avoid problems with large number of xrefs.


include("compat.inc");


if (description)
{
  script_id(56481);
  script_version("1.27");
  script_cvs_date("Date: 2018/07/14  1:59:35");

  script_cve_id(
    "CVE-2009-4022",
    "CVE-2010-0097",
    "CVE-2010-1157",
    "CVE-2010-1634",
    "CVE-2010-2089",
    "CVE-2010-2227",
    "CVE-2010-3436",
    "CVE-2010-3613",
    "CVE-2010-3614",
    "CVE-2010-3718",
    "CVE-2010-4172",
    "CVE-2010-4645",
    "CVE-2011-0013",
    "CVE-2011-0185",
    "CVE-2011-0224",
    "CVE-2011-0229",
    "CVE-2011-0230",
    "CVE-2011-0231",
    "CVE-2011-0249",
    "CVE-2011-0250",
    "CVE-2011-0251",
    "CVE-2011-0252",
    "CVE-2011-0259",
    "CVE-2011-0411",
    "CVE-2011-0419",
    "CVE-2011-0420",
    "CVE-2011-0421",
    "CVE-2011-0534",
    "CVE-2011-0707",
    "CVE-2011-0708",
    "CVE-2011-1092",
    "CVE-2011-1153",
    "CVE-2011-1466",
    "CVE-2011-1467",
    "CVE-2011-1468",
    "CVE-2011-1469",
    "CVE-2011-1470",
    "CVE-2011-1471",
    "CVE-2011-1521",
    "CVE-2011-1755",
    "CVE-2011-1910",
    "CVE-2011-2464",
    "CVE-2011-2690",
    "CVE-2011-2691",
    "CVE-2011-2692",
    "CVE-2011-3192",
    "CVE-2011-3213",
    "CVE-2011-3214",
    "CVE-2011-3217",
    "CVE-2011-3218",
    "CVE-2011-3219",
    "CVE-2011-3220",
    "CVE-2011-3221",
    "CVE-2011-3222",
    "CVE-2011-3223",
    "CVE-2011-3224",
    "CVE-2011-3228"
  );
  script_bugtraq_id(
    37118,
    37865,
    39635,
    40370,
    40863,
    41544,
    44723,
    45015,
    45133,
    45137,
    45668,
    46164,
    46174,
    46177,
    46354,
    46365,
    46429,
    46464,
    46767,
    46786,
    46854,
    46967,
    46968,
    46969,
    46970,
    46975,
    46977,
    48007,
    48250,
    48566,
    48618,
    48660,
    49303,
    50085,
    50091,
    50092,
    50095,
    50098,
    50100,
    50101,
    50111,
    50116,
    50117,
    50122,
    50127,
    50130,
    50131,
    50150  
  );

  script_name(english:"Mac OS X Multiple Vulnerabilities (Security Update 2011-006)");
  script_summary(english:"Check for the presence of Security Update 2011-006");

  script_set_attribute(
    attribute:"synopsis",
    value:
"The remote host is missing a Mac OS X update that fixes several
security issues."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"The remote host is running a version of Mac OS X 10.6 that does not
have Security Update 2011-006 applied.  This update contains numerous
security-related fixes for the following components :

  - Apache
  - Application Firewall
  - ATS
  - BIND
  - Certificate Trust Policy
  - CFNetwork
  - CoreFoundation
  - CoreMedia
  - File Systems
  - IOGraphics
  - iChat Server
  - Mailman
  - MediaKit
  - PHP
  - postfix
  - python
  - QuickTime
  - Tomcat
  - User Documentation
  - Web Server
  - X11"
  );
  script_set_attribute(attribute:"see_also", value:"http://www.zerodayinitiative.com/advisories/ZDI-11-295/");
  script_set_attribute(attribute:"see_also", value:"http://www.zerodayinitiative.com/advisories/ZDI-11-303/");
  script_set_attribute(attribute:"see_also", value:"http://www.zerodayinitiative.com/advisories/ZDI-12-136/");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/archive/1/523931/30/0/threaded");
  script_set_attribute(attribute:"see_also", value:"http://support.apple.com/kb/HT5002");
  script_set_attribute(attribute:"see_also", value:"http://lists.apple.com/archives/security-announce/2011/Oct/msg00003.html");
  script_set_attribute(attribute:"solution", value:"Install Security Update 2011-006 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploit_framework_core", value:"true");
  script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2009/11/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2011/10/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2011/10/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"MacOS X Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/MacOSX/Version", "Host/MacOSX/packages/boms");

  exit(0);
}


include("global_settings.inc");
include("misc_func.inc");


if (!get_kb_item("Host/local_checks_enabled")) exit(0, "Local checks are not enabled.");

os = get_kb_item("Host/MacOSX/Version");
if (!os) exit(0, "The host does not appear to be running Mac OS X.");


if (ereg(pattern:"Mac OS X 10\.6([^0-9]|$)", string:os)) 
{
  packages = get_kb_item_or_exit("Host/MacOSX/packages/boms", exit_code:1);

  if (egrep(pattern:"^com\.apple\.pkg\.update\.security\.(2011\.00[6-9]|201[2-9]\.[0-9]+)(\.snowleopard[0-9.]*)?\.bom", string:packages)) 
    exit(0, "The host has Security Update 2011-006 or later installed and therefore is not affected.");
  else 
    security_hole(0);
}
else exit(0, "The host is running "+os+" and therefore is not affected.");