Test ID:	1.3.6.1.4.1.25623.1.0.102031
Category:	Mac OS X Local Security Checks
Title:	Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003
Summary:	Checks for existence of Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003
Description:	Overview: The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International Components for Unicode Image Capture Image Capture ImageIO Kernel LoginWindow Mail ruby Single Sign-On Wiki Server Solution: Update your Mac OS X operating system. For more information see: http://support.apple.com/kb/HT1897
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1027 http://lists.apple.com/archives/security-announce/2008//May/msg00001.html Cert/CC Advisory: TA08-150A http://www.us-cert.gov/cas/techalerts/TA08-150A.html BugTraq ID: 29412 http://www.securityfocus.com/bid/29412 BugTraq ID: 29490 http://www.securityfocus.com/bid/29490 http://www.vupen.com/english/advisories/2008/1697 http://securitytracker.com/id?1020130 http://secunia.com/advisories/30430 XForce ISS Database: macosx-afpserver-security-bypass(42703) http://xforce.iss.net/xforce/xfdb/42703 Common Vulnerability Exposure (CVE) ID: CVE-2005-3352 AIX APAR: PK16139 http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only AIX APAR: PK25355 http://www-1.ibm.com/support/search.wss?rs=0&q=PK25355&apar=only http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Debian Security Information: DSA-1167 (Google Search) http://www.debian.org/security/2006/dsa-1167 http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.html http://www.securityfocus.com/archive/1/archive/1/425399/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200602-03.xml HPdes Security Advisory: HPSBUX02145 http://www.securityfocus.com/archive/1/archive/1/445206/100/0/threaded HPdes Security Advisory: SSRT061202 HPdes Security Advisory: HPSBUX02164 http://www.securityfocus.com/archive/1/archive/1/450321/100/0/threaded HPdes Security Advisory: HPSBUX02172 http://www.securityfocus.com/archive/1/archive/1/450315/100/0/threaded HPdes Security Advisory: SSRT061265 HPdes Security Advisory: SSRT061269 HPdes Security Advisory: HPSBMA02328 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449 HPdes Security Advisory: SSRT071293 HPdes Security Advisory: HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPdes Security Advisory: SSRT090208 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:007 http://www.openpkg.org/security/OpenPKG-SA-2005.029-apache.txt RedHat Security Advisories: RHSA-2006:0159 http://rhn.redhat.com/errata/RHSA-2006-0159.html http://www.redhat.com/support/errata/RHSA-2006-0158.html RedHat Security Advisories: RHSA-2006:0692 http://rhn.redhat.com/errata/RHSA-2006-0692.html SGI Security Advisory: 20060101-01-U ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.685483 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.470158 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1 SuSE Security Announcement: SUSE-SR:2006:004 (Google Search) http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html SuSE Security Announcement: SUSE-SA:2006:043 (Google Search) http://www.novell.com/linux/security/advisories/2006_43_apache.html SuSE Security Announcement: SUSE-SR:2007:011 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html http://www.trustix.org/errata/2005/0074/ http://www.ubuntulinux.org/usn/usn-241-1 BugTraq ID: 15834 http://www.securityfocus.com/bid/15834 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10480 http://www.vupen.com/english/advisories/2005/2870 http://www.vupen.com/english/advisories/2006/2423 http://www.vupen.com/english/advisories/2006/3995 http://www.vupen.com/english/advisories/2006/4015 http://www.vupen.com/english/advisories/2006/4300 http://www.vupen.com/english/advisories/2006/4868 http://www.vupen.com/english/advisories/2008/0924/references http://www.vupen.com/english/advisories/2008/1246/references http://securitytracker.com/id?1015344 http://secunia.com/advisories/18008 http://secunia.com/advisories/18333 http://secunia.com/advisories/18339 http://secunia.com/advisories/18340 http://secunia.com/advisories/18429 http://secunia.com/advisories/18585 http://secunia.com/advisories/18517 http://secunia.com/advisories/18743 http://secunia.com/advisories/17319 http://secunia.com/advisories/18526 http://secunia.com/advisories/19012 http://secunia.com/advisories/20670 http://secunia.com/advisories/21744 http://secunia.com/advisories/22140 http://secunia.com/advisories/22368 http://secunia.com/advisories/22388 http://secunia.com/advisories/22669 http://secunia.com/advisories/23260 http://secunia.com/advisories/20046 http://secunia.com/advisories/25239 http://secunia.com/advisories/29420 http://secunia.com/advisories/29849 Common Vulnerability Exposure (CVE) ID: CVE-2005-3357 http://svn.apache.org/viewcvs?rev=358026&view=rev http://sunsolve.sun.com/search/document.do?assetkey=1-26-102640-1 SuSE Security Announcement: SuSE-SA:2006:051 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Sep/0004.html SuSE Security Announcement: SUSE-SA:2006:051 (Google Search) http://www.novell.com/linux/security/advisories/2006_51_apache.html BugTraq ID: 16152 http://www.securityfocus.com/bid/16152 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11467 http://www.vupen.com/english/advisories/2006/0056 http://www.vupen.com/english/advisories/2006/3920 http://www.vupen.com/english/advisories/2006/4207 http://securitytracker.com/id?1015447 http://secunia.com/advisories/18307 http://secunia.com/advisories/21848 http://secunia.com/advisories/22233 http://secunia.com/advisories/22523 http://secunia.com/advisories/22992 Common Vulnerability Exposure (CVE) ID: CVE-2006-3747 Bugtraq: 20060728 Apache mod_rewrite Buffer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/441487/100/0/threaded Bugtraq: 20060728 [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released (Google Search) http://www.securityfocus.com/archive/1/archive/1/441485/100/0/threaded Bugtraq: 20060728 rPSA-2006-0139-1 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/archive/1/441526/100/200/threaded Bugtraq: 20060820 POC & exploit for Apache mod_rewrite off-by-one (Google Search) http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048267.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048271.html http://kbase.redhat.com/faq/FAQ_68_8653.shtm http://svn.apache.org/viewvc?view=rev&revision=426144 HPdes Security Advisory: HPSBMA02250 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 HPdes Security Advisory: SSRT061275 CERT/CC vulnerability note: VU#395412 http://www.kb.cert.org/vuls/id/395412 AIX APAR: PK27875 http://www-1.ibm.com/support/docview.wss?uid=swg24013080 AIX APAR: PK29154 http://www-1.ibm.com/support/docview.wss?uid=swg1PK29154 AIX APAR: PK29156 http://www-1.ibm.com/support/docview.wss?uid=swg1PK29156 Debian Security Information: DSA-1131 (Google Search) http://www.debian.org/security/2006/dsa-1131 Debian Security Information: DSA-1132 (Google Search) http://www.debian.org/security/2006/dsa-1132 http://security.gentoo.org/glsa/glsa-200608-01.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:133 http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.015-apache.html http://lwn.net/Alerts/194228/ http://www.ubuntu.com/usn/usn-328-1 BugTraq ID: 19204 http://www.securityfocus.com/bid/19204 http://www.vupen.com/english/advisories/2006/3017 http://www.vupen.com/english/advisories/2006/3264 http://www.vupen.com/english/advisories/2006/3282 http://www.vupen.com/english/advisories/2006/3884 http://www.vupen.com/english/advisories/2007/2783 http://www.osvdb.org/27588 http://securitytracker.com/id?1016601 http://secunia.com/advisories/21197 http://secunia.com/advisories/21241 http://secunia.com/advisories/21245 http://secunia.com/advisories/21266 http://secunia.com/advisories/21273 http://secunia.com/advisories/21284 http://secunia.com/advisories/21313 http://secunia.com/advisories/21307 http://secunia.com/advisories/21315 http://secunia.com/advisories/21247 http://secunia.com/advisories/21478 http://secunia.com/advisories/21509 http://secunia.com/advisories/22262 http://secunia.com/advisories/23028 http://secunia.com/advisories/21346 http://secunia.com/advisories/26329 http://securityreason.com/securityalert/1312 XForce ISS Database: apache-modrewrite-offbyone-bo(28063) http://xforce.iss.net/xforce/xfdb/28063 Common Vulnerability Exposure (CVE) ID: CVE-2007-1863 Bugtraq: 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (Google Search) http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded http://lists.vmware.com/pipermail/security-announce/2009/000062.html http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244658 AIX APAR: PK49355 http://www-1.ibm.com/support/docview.wss?uid=swg1PK49355 AIX APAR: PK52702 http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702 http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html http://security.gentoo.org/glsa/glsa-200711-06.xml HPdes Security Advisory: HPSBUX02262 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 HPdes Security Advisory: SSRT071447 http://www.mandriva.com/security/advisories?name=MDKSA-2007:140 http://www.mandriva.com/security/advisories?name=MDKSA-2007:141 RedHat Security Advisories: RHSA-2007:0534 http://rhn.redhat.com/errata/RHSA-2007-0534.html RedHat Security Advisories: RHSA-2007:0556 http://rhn.redhat.com/errata/RHSA-2007-0556.html RedHat Security Advisories: RHSA-2007:0533 https://rhn.redhat.com/errata/RHSA-2007-0533.html http://www.redhat.com/support/errata/RHSA-2007-0557.html SuSE Security Announcement: SUSE-SA:2007:061 (Google Search) http://www.novell.com/linux/security/advisories/2007_61_apache2.html http://www.trustix.org/errata/2007/0026/ http://www.ubuntu.com/usn/usn-499-1 BugTraq ID: 24649 http://www.securityfocus.com/bid/24649 http://osvdb.org/37079 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9824 http://secunia.com/advisories/28606 http://www.vupen.com/english/advisories/2007/2727 http://www.vupen.com/english/advisories/2007/3283 http://www.vupen.com/english/advisories/2007/3386 http://www.securitytracker.com/id?1018303 http://secunia.com/advisories/25830 http://secunia.com/advisories/25873 http://secunia.com/advisories/25920 http://secunia.com/advisories/26273 http://secunia.com/advisories/26443 http://secunia.com/advisories/26508 http://secunia.com/advisories/26822 http://secunia.com/advisories/26842 http://secunia.com/advisories/26993 http://secunia.com/advisories/27037 http://secunia.com/advisories/27563 http://secunia.com/advisories/27732 http://www.vupen.com/english/advisories/2008/0233 Common Vulnerability Exposure (CVE) ID: CVE-2007-3847 http://marc.info/?l=apache-cvs&m=118592992309395&w=2 http://marc.info/?l=apache-httpd-dev&m=118595556504202&w=2 http://marc.info/?l=apache-httpd-dev&m=118595953217856&w=2 AIX APAR: PK50469 http://www-1.ibm.com/support/docview.wss?uid=swg1PK50469 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html HPdes Security Advisory: HPSBUX02273 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588 HPdes Security Advisory: SSRT071476 http://www.mandriva.com/security/advisories?name=MDKSA-2007:235 http://www.redhat.com/support/errata/RHSA-2007-0911.html http://www.redhat.com/support/errata/RHSA-2007-0746.html http://www.redhat.com/support/errata/RHSA-2007-0747.html http://www.redhat.com/support/errata/RHSA-2008-0005.html http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748 http://www.ubuntu.com/usn/usn-575-1 BugTraq ID: 25489 http://www.securityfocus.com/bid/25489 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10525 http://www.vupen.com/english/advisories/2007/3020 http://www.vupen.com/english/advisories/2007/3095 http://www.vupen.com/english/advisories/2007/3494 http://www.vupen.com/english/advisories/2007/3955 http://www.securitytracker.com/id?1018633 http://secunia.com/advisories/26636 http://secunia.com/advisories/26722 http://secunia.com/advisories/26790 http://secunia.com/advisories/26952 http://secunia.com/advisories/27209 http://secunia.com/advisories/27593 http://secunia.com/advisories/27882 http://secunia.com/advisories/27971 http://secunia.com/advisories/28467 http://secunia.com/advisories/28749 http://secunia.com/advisories/28922 Common Vulnerability Exposure (CVE) ID: CVE-2007-4465 Bugtraq: 20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/479237/100/0/threaded http://securityreason.com/achievement_securityalert/46 HPdes Security Advisory: HPSBUX02365 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 HPdes Security Advisory: SSRT080118 HPdes Security Advisory: HPSBUX02431 http://marc.info/?l=bugtraq&m=124654546101607&w=2 HPdes Security Advisory: SSRT090085 HPdes Security Advisory: HPSBUX02465 http://marc.info/?l=bugtraq&m=125631037611762&w=2 HPdes Security Advisory: SSRT090192 http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 http://www.redhat.com/support/errata/RHSA-2008-0004.html http://www.redhat.com/support/errata/RHSA-2008-0006.html http://www.redhat.com/support/errata/RHSA-2008-0008.html http://www.redhat.com/support/errata/RHSA-2008-0261.html BugTraq ID: 25653 http://www.securityfocus.com/bid/25653 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6089 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10929 http://secunia.com/advisories/35650 http://securitytracker.com/id?1019194 http://secunia.com/advisories/28471 http://secunia.com/advisories/28607 http://secunia.com/advisories/31651 http://secunia.com/advisories/33105 http://securityreason.com/securityalert/3113 XForce ISS Database: apache-utf7-xss(36586) http://xforce.iss.net/xforce/xfdb/36586 Common Vulnerability Exposure (CVE) ID: CVE-2007-5000 Bugtraq: 20080716 rPSA-2008-0035-1 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/archive/1/494428/100/0/threaded AIX APAR: PK58024 http://www-1.ibm.com/support/docview.wss?uid=swg1PK58024 AIX APAR: PK58074 http://www-1.ibm.com/support/docview.wss?uid=swg1PK58074 AIX APAR: PK63273 http://www-1.ibm.com/support/docview.wss?uid=swg1PK63273 AIX APAR: PK65782 http://www-1.ibm.com/support/docview.wss?uid=swg24019245 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html HPdes Security Advisory: HPSBUX02308 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501 HPdes Security Advisory: SSRT080010 HPdes Security Advisory: HPSBMA02388 http://www.securityfocus.com/archive/1/archive/1/498523/100/0/threaded HPdes Security Advisory: SSRT080059 http://www.mandriva.com/security/advisories?name=MDVSA-2008:015 http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 http://www.redhat.com/support/errata/RHSA-2008-0007.html http://www.redhat.com/support/errata/RHSA-2008-0009.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1 SuSE Security Announcement: SUSE-SA:2008:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html BugTraq ID: 26838 http://www.securityfocus.com/bid/26838 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9539 http://secunia.com/advisories/32800 http://www.vupen.com/english/advisories/2007/4201 http://www.vupen.com/english/advisories/2007/4202 http://www.vupen.com/english/advisories/2007/4301 http://www.vupen.com/english/advisories/2008/0084 http://www.vupen.com/english/advisories/2008/0178 http://www.vupen.com/english/advisories/2008/0398 http://www.vupen.com/english/advisories/2008/0809/references http://www.vupen.com/english/advisories/2008/1224/references http://www.vupen.com/english/advisories/2008/1623/references http://www.vupen.com/english/advisories/2008/1875/references http://www.osvdb.org/39134 http://securitytracker.com/id?1019093 http://secunia.com/advisories/28046 http://secunia.com/advisories/28073 http://secunia.com/advisories/28081 http://secunia.com/advisories/28196 http://secunia.com/advisories/28375 http://secunia.com/advisories/28525 http://secunia.com/advisories/28526 http://secunia.com/advisories/28750 http://secunia.com/advisories/28977 http://secunia.com/advisories/29640 http://secunia.com/advisories/29806 http://secunia.com/advisories/29988 http://secunia.com/advisories/30356 http://secunia.com/advisories/31142 http://secunia.com/advisories/30732 XForce ISS Database: apache-modimagemap-xss(39002) http://xforce.iss.net/xforce/xfdb/39002 XForce ISS Database: apache-modimap-xss(39001) http://xforce.iss.net/xforce/xfdb/39001 Common Vulnerability Exposure (CVE) ID: CVE-2007-6388 AIX APAR: PK59667 http://www-1.ibm.com/support/search.wss?rs=0&q=PK59667&apar=only AIX APAR: PK62966 http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966 HPdes Security Advisory: HPSBUX02313 http://www.securityfocus.com/archive/1/archive/1/488082/100/0/threaded HPdes Security Advisory: SSRT080015 BugTraq ID: 27237 http://www.securityfocus.com/bid/27237 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10272 http://www.vupen.com/english/advisories/2008/0047 http://www.vupen.com/english/advisories/2008/0447/references http://www.vupen.com/english/advisories/2008/0554 http://www.vupen.com/english/advisories/2008/0986/references http://securitytracker.com/id?1019154 http://secunia.com/advisories/28965 http://secunia.com/advisories/29504 http://secunia.com/advisories/33200 http://securityreason.com/securityalert/3541 XForce ISS Database: apache-status-page-xss(39472) http://xforce.iss.net/xforce/xfdb/39472 Common Vulnerability Exposure (CVE) ID: CVE-2008-1028 BugTraq ID: 29487 http://www.securityfocus.com/bid/29487 http://securitytracker.com/id?1020131 XForce ISS Database: macosx-appkit-code-execution(42705) http://xforce.iss.net/xforce/xfdb/42705 Common Vulnerability Exposure (CVE) ID: CVE-2008-1577 BugTraq ID: 29489 http://www.securityfocus.com/bid/29489 http://securitytracker.com/id?1020132 XForce ISS Database: macosx-pixlet-code-execution(42706) http://xforce.iss.net/xforce/xfdb/42706 Common Vulnerability Exposure (CVE) ID: CVE-2008-1575 BugTraq ID: 29492 http://www.securityfocus.com/bid/29492 http://securitytracker.com/id?1020133 XForce ISS Database: macosx-ats-code-execution(42707) http://xforce.iss.net/xforce/xfdb/42707 Common Vulnerability Exposure (CVE) ID: CVE-2008-1580 BugTraq ID: 29493 http://www.securityfocus.com/bid/29493 http://securitytracker.com/id?1020134 XForce ISS Database: macosx-cfnetwork-info-disclosure(42708) http://xforce.iss.net/xforce/xfdb/42708 Common Vulnerability Exposure (CVE) ID: CVE-2008-1030 BugTraq ID: 29491 http://www.securityfocus.com/bid/29491 http://securitytracker.com/id?1020135 XForce ISS Database: macosx-corefoundation-cfdatareplacebytes-bo(42709) http://xforce.iss.net/xforce/xfdb/42709 Common Vulnerability Exposure (CVE) ID: CVE-2008-1031 BugTraq ID: 29480 http://www.securityfocus.com/bid/29480 http://securitytracker.com/id?1020136 XForce ISS Database: macosx-coregraphics-unspec-code-execution(42710) http://xforce.iss.net/xforce/xfdb/42710 Common Vulnerability Exposure (CVE) ID: CVE-2008-1032 BugTraq ID: 29481 http://www.securityfocus.com/bid/29481 http://securitytracker.com/id?1020137 XForce ISS Database: macosx-coretypes-weak-security(42711) http://xforce.iss.net/xforce/xfdb/42711 Common Vulnerability Exposure (CVE) ID: CVE-2008-1033 BugTraq ID: 29484 http://www.securityfocus.com/bid/29484 http://securitytracker.com/id?1020145 XForce ISS Database: macosx-cups-info-disclosure(42713) http://xforce.iss.net/xforce/xfdb/42713 Common Vulnerability Exposure (CVE) ID: CVE-2007-5275 http://crypto.stanford.edu/dns/dns-rebinding.pdf http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml http://www.redhat.com/support/errata/RHSA-2007-1126.html http://www.redhat.com/support/errata/RHSA-2008-0221.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 SuSE Security Announcement: SUSE-SA:2007:069 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html SuSE Security Announcement: SUSE-SA:2008:022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html Cert/CC Advisory: TA07-355A http://www.us-cert.gov/cas/techalerts/TA07-355A.html Cert/CC Advisory: TA08-100A http://www.us-cert.gov/cas/techalerts/TA08-100A.html BugTraq ID: 26930 http://www.securityfocus.com/bid/26930 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9250 http://www.vupen.com/english/advisories/2007/4258 http://www.vupen.com/english/advisories/2008/1724/references http://securitytracker.com/id?1019116 http://secunia.com/advisories/28157 http://secunia.com/advisories/28161 http://secunia.com/advisories/28570 http://secunia.com/advisories/28213 http://secunia.com/advisories/29763 http://secunia.com/advisories/29865 http://secunia.com/advisories/30507 Common Vulnerability Exposure (CVE) ID: CVE-2007-6019 Bugtraq: 20080408 ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/490623/100/0/threaded Bugtraq: 20080414 Secunia Research: Adobe Flash Player "Declare Function (V7)" HeapOverflow (Google Search) http://www.securityfocus.com/archive/1/archive/1/490824/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-08-021 BugTraq ID: 28694 http://www.securityfocus.com/bid/28694 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10160 http://www.securitytracker.com/id?1019810 http://securityreason.com/securityalert/3805 XForce ISS Database: adobe-flash-declarefunction2-bo(41717) http://xforce.iss.net/xforce/xfdb/41717 Common Vulnerability Exposure (CVE) ID: CVE-2007-0071 ISS Security Advisory: 20080408 Adobe Flash Player Invalid Pointer Vulnerability http://www.iss.net/threats/289.html http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/ http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html http://isc.sans.org/diary.html?storyid=4465 http://www.zerodayinitiative.com/advisories/ZDI-08-032/ Cert/CC Advisory: TA08-149A http://www.us-cert.gov/cas/techalerts/TA08-149A.html CERT/CC vulnerability note: VU#159523 http://www.kb.cert.org/vuls/id/159523 CERT/CC vulnerability note: VU#395473 http://www.kb.cert.org/vuls/id/395473 BugTraq ID: 28695 http://www.securityfocus.com/bid/28695 BugTraq ID: 29386 http://www.securityfocus.com/bid/29386 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10379 http://www.vupen.com/english/advisories/2008/1662/references http://www.osvdb.org/44282 http://www.securitytracker.com/id?1019811 http://www.securitytracker.com/id?1020114 http://secunia.com/advisories/30404 XForce ISS Database: multimedia-file-integer-overflow(37277) http://xforce.iss.net/getrecord.jsp?id=37277 Common Vulnerability Exposure (CVE) ID: CVE-2008-1655 http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns BugTraq ID: 28697 http://www.securityfocus.com/bid/28697 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10724 http://www.osvdb.org/44283 http://www.securitytracker.com/id?1019808 XForce ISS Database: adobe-flash-dnsrebinding-security-bypass(41807) http://xforce.iss.net/xforce/xfdb/41807 Common Vulnerability Exposure (CVE) ID: CVE-2008-1654 Bugtraq: 20080113 Hacking The Interwebs (Google Search) http://seclists.org/bugtraq/2008/Jan/0182.html http://seclists.org/fulldisclosure/2008/Jan/0204.html http://www.gnucitizen.org/blog/hacking-the-interwebs/ CERT/CC vulnerability note: VU#347812 http://www.kb.cert.org/vuls/id/347812 BugTraq ID: 28696 http://www.securityfocus.com/bid/28696 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11435 http://www.securitytracker.com/id?1019807 XForce ISS Database: adobe-flash-navigatetourl-csrf(41718) http://xforce.iss.net/xforce/xfdb/41718 Common Vulnerability Exposure (CVE) ID: CVE-2008-1034 CERT/CC vulnerability note: VU#566875 http://www.kb.cert.org/vuls/id/566875 BugTraq ID: 29483 http://www.securityfocus.com/bid/29483 http://securitytracker.com/id?1020138 XForce ISS Database: macosx-helpviewer-bo(42716) http://xforce.iss.net/xforce/xfdb/42716 Common Vulnerability Exposure (CVE) ID: CVE-2008-1035 Bugtraq: 20080521 CORE-2008-0126: Multiple vulnerabilities in iCal (Google Search) http://www.securityfocus.com/archive/1/archive/1/492414/100/0/threaded Bugtraq: 20080528 Re: CORE-2008-0126: Multiple vulnerabilities in iCal (Google Search) http://www.securityfocus.com/archive/1/archive/1/492638/100/100/threaded http://www.securityfocus.com/archive/1/archive/1/492682/100/0/threaded http://www.coresecurity.com/?action=item&id=2219 BugTraq ID: 28633 http://www.securityfocus.com/bid/28633 BugTraq ID: 29486 http://www.securityfocus.com/bid/29486 http://www.securitytracker.com/id?1020095 http://www.vupen.com/english/advisories/2008/1601 Common Vulnerability Exposure (CVE) ID: CVE-2008-1036 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064 Debian Security Information: DSA-1762 (Google Search) http://www.debian.org/security/2009/dsa-1762 http://www.redhat.com/support/errata/RHSA-2009-0296.html http://www.ubuntu.com/usn/USN-747-1 BugTraq ID: 29488 http://www.securityfocus.com/bid/29488 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10824 http://secunia.com/advisories/34290 http://secunia.com/advisories/34777 http://securitytracker.com/id?1020139 XForce ISS Database: macosx-icu-security-bypass(42717) http://xforce.iss.net/xforce/xfdb/42717 Common Vulnerability Exposure (CVE) ID: CVE-2008-1571 BugTraq ID: 29501 http://www.securityfocus.com/bid/29501 http://securitytracker.com/id?1020141 XForce ISS Database: macosx-imagecapture-directory-traversal(42718) http://xforce.iss.net/xforce/xfdb/42718 Common Vulnerability Exposure (CVE) ID: CVE-2008-1572 BugTraq ID: 29521 http://www.securityfocus.com/bid/29521 XForce ISS Database: macosx-imagecapture-symlink(42719) http://xforce.iss.net/xforce/xfdb/42719 Common Vulnerability Exposure (CVE) ID: CVE-2008-1573 http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html BugTraq ID: 29513 http://www.securityfocus.com/bid/29513 http://www.vupen.com/english/advisories/2008/1882/references http://securitytracker.com/id?1020144 http://secunia.com/advisories/30775 XForce ISS Database: macosx-imageio-information-disclosure(42721) http://xforce.iss.net/xforce/xfdb/42721 Common Vulnerability Exposure (CVE) ID: CVE-2007-5266 Bugtraq: 20071112 FLEA-2007-0065-1 libpng (Google Search) http://www.securityfocus.com/archive/1/archive/1/483582/100/0/threaded Bugtraq: 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK (Google Search) http://www.securityfocus.com/archive/1/archive/1/489135/100/0/threaded http://sourceforge.net/mailarchive/forum.php?thread_name=5122753600C3E94F87FBDFFCC090D1FF0400EA68%40MERCMBX07.na.sas.com&forum_name=png-mng-implement http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0709140846k24e9a040r81623783b6b1c00f%40mail.gmail.com http://www.coresecurity.com/?action=item&id=2148 http://www.gentoo.org/security/en/glsa/glsa-200711-08.xml http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:217 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323 http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 BugTraq ID: 25957 http://www.securityfocus.com/bid/25957 http://secunia.com/advisories/35302 http://secunia.com/advisories/35386 http://secunia.com/advisories/27284 http://secunia.com/advisories/27529 http://secunia.com/advisories/27629 http://secunia.com/advisories/27746 http://secunia.com/advisories/30161 http://www.vupen.com/english/advisories/2009/1462 http://www.vupen.com/english/advisories/2009/1560 Common Vulnerability Exposure (CVE) ID: CVE-2007-5268 http://sourceforge.net/mailarchive/message.php?msg_name=5122753600C3E94F87FBDFFCC090D1FF0400EBC5%40MERCMBX07.na.sas.com http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement http://www.ubuntu.com/usn/usn-538-1 BugTraq ID: 25956 http://www.securityfocus.com/bid/25956 http://www.vupen.com/english/advisories/2007/3390 http://secunia.com/advisories/27093 http://secunia.com/advisories/27405 Common Vulnerability Exposure (CVE) ID: CVE-2007-5269 Bugtraq: 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues (Google Search) http://www.securityfocus.com/archive/1/archive/1/489739/100/0/threaded Bugtraq: 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. (Google Search) http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://lists.vmware.com/pipermail/security-announce/2008/000008.html Debian Security Information: DSA-1750 (Google Search) http://www.debian.org/security/2009/dsa-1750 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00353.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00356.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00072.html http://www.redhat.com/support/errata/RHSA-2007-0992.html SuSE Security Announcement: SUSE-SR:2007:025 (Google Search) http://www.novell.com/linux/security/advisories/2007_25_sr.html BugTraq ID: 28276 http://www.securityfocus.com/bid/28276 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10614 http://secunia.com/advisories/34388 http://www.vupen.com/english/advisories/2008/0905/references http://www.vupen.com/english/advisories/2008/2466 http://www.securitytracker.com/id?1018849 http://secunia.com/advisories/27369 http://secunia.com/advisories/27391 http://secunia.com/advisories/27492 http://secunia.com/advisories/27662 http://secunia.com/advisories/27965 http://secunia.com/advisories/31712 http://secunia.com/advisories/31713 Common Vulnerability Exposure (CVE) ID: CVE-2008-1574 BugTraq ID: 29514 http://www.securityfocus.com/bid/29514 XForce ISS Database: macosx-imageio-jpeg2000-bo(42722) http://xforce.iss.net/xforce/xfdb/42722 Common Vulnerability Exposure (CVE) ID: CVE-2008-0177 http://www.milw0rm.com/exploits/5191 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html FreeBSD Security Advisory: FreeBSD-SA-08:04 http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc CERT/CC vulnerability note: VU#110947 http://www.kb.cert.org/vuls/id/110947 BugTraq ID: 27642 http://www.securityfocus.com/bid/27642 http://www.vupen.com/english/advisories/2008/0441 http://www.vupen.com/english/advisories/2008/0688 http://www.vupen.com/english/advisories/2008/2094/references http://securitytracker.com/id?1019314 http://secunia.com/advisories/28788 http://secunia.com/advisories/28816 http://secunia.com/advisories/28979 http://secunia.com/advisories/29130 http://secunia.com/advisories/31074 Common Vulnerability Exposure (CVE) ID: CVE-2007-6359 http://digit-labs.org/files/exploits/xnu-superblob-dos.c BugTraq ID: 26840 http://www.securityfocus.com/bid/26840 http://www.vupen.com/english/advisories/2007/4216 http://secunia.com/advisories/28048 XForce ISS Database: macosx-csvalidatepage-dos(38997) http://xforce.iss.net/xforce/xfdb/38997 Common Vulnerability Exposure (CVE) ID: CVE-2008-1576 BugTraq ID: 29500 http://www.securityfocus.com/bid/29500 http://securitytracker.com/id?1020140 XForce ISS Database: macosx-mail-code-execution(42723) http://xforce.iss.net/xforce/xfdb/42723 Common Vulnerability Exposure (CVE) ID: CVE-2007-6612 http://rubyforge.org/pipermail/mongrel-users/2007-December/004733.html http://rubyforge.org/pipermail/mongrel-users/2007-December/004736.html http://rubyforge.org/pipermail/mongrel-users/2007-December/004742.html http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html BugTraq ID: 27133 http://www.securityfocus.com/bid/27133 http://osvdb.org/39866 http://secunia.com/advisories/28323 Common Vulnerability Exposure (CVE) ID: CVE-2008-1578 BugTraq ID: 29520 http://www.securityfocus.com/bid/29520 http://securitytracker.com/id?1020142 XForce ISS Database: macosx-ssoutil-information-disclosure(42725) http://xforce.iss.net/xforce/xfdb/42725 Common Vulnerability Exposure (CVE) ID: CVE-2008-1579 http://securitytracker.com/id?1020143 XForce ISS Database: macosx-wikiserver-information-disclosure(42727) http://xforce.iss.net/xforce/xfdb/42727
Copyright	Copyright (C) 2010 LSS

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: