Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

CVE-2008-2830

The CVE-2008-2830 entry describes a local privilege-escalation flaw in Apple Mac OS X (notably 10.4.11 and 10.5.4, plus some other 10.4/10.5 builds), where the Open Scripting Architecture fails to properly restrict loading of scripting addition plugins. This allows a local user to gain privileges...