Mac OS X 10.5.5 Update / Security Update 2008-006

The remote host is missing Mac OS X 10.5.5 Update / Security Update 2008-006. One or more of the following components are affected: ATS BIND ClamAV Directory Services Finder ImageIO Kernel libresolv Login Window mDNSResponder OpenSSH QuickDraw Manager Ruby SearchKit System Configuration System...

CVE-2008-3609

CVE-2008-3609 affects Apple Mac OS X 10.5 through 10.5.4. The kernel does not flush cached credentials when recycling (purging) a vnode, which may allow a local user to bypass intended file read/write permissions. The provided documents do not include a confirmed exploit, affected software versio...