Test ID:	1.3.6.1.4.1.25623.1.0.902470
Category:	Mac OS X Local Security Checks
Title:	Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)
Summary:	This host is missing an important security update according to; Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001.
Description:	Summary: This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of the browser, inject scripts, bypass certain security restrictions or cause a denial-of-service condition. Affected Software/OS: X11, ATS, PHP, HFS, Ruby, Samba, bzip2, Kernel, AirPort, Apache, ClamAV, Mailman, Libinfo, libxml, ImageIO, Kerberos, CoreText, Terminal, Installer, QuickLook, QuickTime, Image RAW, Subversion, CarbonCore, AppleScript, File Quarantine Solution: Upgrade to Mac OS X 10.6.7 or Run Mac Updates and update the Security Update 2011-001 CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0172 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2010-1452 42367 http://secunia.com/advisories/42367 ADV-2010-2218 http://www.vupen.com/english/advisories/2010/2218 ADV-2010-3064 http://www.vupen.com/english/advisories/2010/3064 ADV-2011-0291 http://www.vupen.com/english/advisories/2011/0291 APPLE-SA-2011-03-21-1 HPSBMU02753 http://marc.info/?l=bugtraq&m=133355494609819&w=2 HPSBUX02612 http://marc.info/?l=bugtraq&m=129190899612998&w=2 RHSA-2010:0659 http://www.redhat.com/support/errata/RHSA-2010-0659.html RHSA-2011:0896 http://www.redhat.com/support/errata/RHSA-2011-0896.html RHSA-2011:0897 http://www.redhat.com/support/errata/RHSA-2011-0897.html SSA:2010-240-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.467395 SSRT100345 SSRT100782 SUSE-SU-2011:1000 http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html SUSE-SU-2011:1216 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html USN-1021-1 http://ubuntu.com/usn/usn-1021-1 [apache-announce] 20100725 [ANNOUNCEMENT] Apache HTTP Server 2.2.16 Released http://marc.info/?l=apache-announce&m=128009718610929&w=2 [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/ https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/ https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210422 svn commit: r1074079 [2/3] - in /websites/staging/httpd/trunk/content: ./ apreq/ contribute/ contributors/ dev/ docs-project/ docs/ info/ mod_fcgid/ mod_ftp/ mod_mbox/ mod_smtpd/ modules/ security/ test/ test/flood/ https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav http://httpd.apache.org/security/vulnerabilities_22.html http://support.apple.com/kb/HT4581 https://issues.apache.org/bugzilla/show_bug.cgi?id=49246 oval:org.mitre.oval:def:11683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683 oval:org.mitre.oval:def:12341 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341 Common Vulnerability Exposure (CVE) ID: CVE-2010-2068 1024096 http://securitytracker.com/id?1024096 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068 http://www.securityfocus.com/archive/1/511809/100/0/threaded 40206 http://secunia.com/advisories/40206 40824 http://secunia.com/advisories/40824 40827 http://www.securityfocus.com/bid/40827 41480 http://secunia.com/advisories/41480 41490 http://secunia.com/advisories/41490 41722 http://secunia.com/advisories/41722 ADV-2010-1436 http://www.vupen.com/english/advisories/2010/1436 HPSBMA02568 http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 MDVSA-2013:150 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 PM16366 http://www.ibm.com/support/docview.wss?uid=swg1PM16366 SI4053 http://www-01.ibm.com/support/docview.wss?uid=nas352ca0ac9460f9b8886257777005dd0e4 SSRT100219 [httpd-announce] 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068 http://mail-archives.apache.org/mod_mbox/httpd-announce/201006.mbox/%3C4C12933D.4060400%40apache.org%3E [httpd-cvs] 20210330 svn commit: r1888222 - in /httpd/site/trunk/content/security/json: CVE-2010-2068.json CVE-2010-2791.json CVE-2011-0419.json CVE-2011-3368.json https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E apache-modproxyhttp-timeout-info-disc(59413) https://exchange.xforce.ibmcloud.com/vulnerabilities/59413 http://www.apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch http://www.apache.org/dist/httpd/patches/apply_to_2.3.5/CVE-2010-2068-r953418.patch http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html oval:org.mitre.oval:def:11491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11491 oval:org.mitre.oval:def:6931 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6931 Common Vulnerability Exposure (CVE) ID: CVE-2011-0173 Common Vulnerability Exposure (CVE) ID: CVE-2011-0174 Common Vulnerability Exposure (CVE) ID: CVE-2011-0175 Common Vulnerability Exposure (CVE) ID: CVE-2011-0176 Common Vulnerability Exposure (CVE) ID: CVE-2011-0177 Common Vulnerability Exposure (CVE) ID: CVE-2010-0405 Bugtraq: 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console (Google Search) http://www.securityfocus.com/archive/1/515055/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html http://security.gentoo.org/glsa/glsa-201301-05.xml http://marc.info/?l=oss-security&m=128506868510655&w=2 http://www.redhat.com/support/errata/RHSA-2010-0703.html http://www.redhat.com/support/errata/RHSA-2010-0858.html http://secunia.com/advisories/41452 http://secunia.com/advisories/41505 http://secunia.com/advisories/42350 http://secunia.com/advisories/42404 http://secunia.com/advisories/42405 http://secunia.com/advisories/42529 http://secunia.com/advisories/42530 http://secunia.com/advisories/48378 SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html http://www.ubuntu.com/usn/usn-986-1 http://www.ubuntu.com/usn/USN-986-2 http://www.ubuntu.com/usn/USN-986-3 http://www.vupen.com/english/advisories/2010/2455 http://www.vupen.com/english/advisories/2010/3043 http://www.vupen.com/english/advisories/2010/3052 http://www.vupen.com/english/advisories/2010/3073 http://www.vupen.com/english/advisories/2010/3126 http://www.vupen.com/english/advisories/2010/3127 Common Vulnerability Exposure (CVE) ID: CVE-2011-0178 Common Vulnerability Exposure (CVE) ID: CVE-2010-3434 http://www.openwall.com/lists/oss-security/2010/09/22/1 http://www.openwall.com/lists/oss-security/2010/09/27/6 http://www.openwall.com/lists/oss-security/2010/09/28/3 http://www.openwall.com/lists/oss-security/2010/09/28/5 SuSE Security Announcement: SUSE-SR:2010:020 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4260 1024818 http://www.securitytracker.com/id?1024818 42426 http://secunia.com/advisories/42426 42523 http://secunia.com/advisories/42523 42555 http://secunia.com/advisories/42555 42720 http://secunia.com/advisories/42720 45152 http://www.securityfocus.com/bid/45152 ADV-2010-3135 http://www.vupen.com/english/advisories/2010/3135 ADV-2010-3137 http://www.vupen.com/english/advisories/2010/3137 ADV-2010-3185 http://www.vupen.com/english/advisories/2010/3185 FEDORA-2010-18564 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html FEDORA-2010-18568 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051905.html MDVSA-2010:249 http://www.mandriva.com/security/advisories?name=MDVSA-2010:249 SUSE-SR:2010:024 http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html USN-1031-1 http://www.ubuntu.com/usn/USN-1031-1 [oss-security] 20101203 Re: clamav 0.96.5 released http://openwall.com/lists/oss-security/2010/12/03/3 http://openwall.com/lists/oss-security/2010/12/03/6 [oss-security] 20101203 clamav 0.96.5 released http://openwall.com/lists/oss-security/2010/12/03/1 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=master http://xorl.wordpress.com/2010/12/06/cve-2010-4260-clamav-multiple-pdf-vulnerabilities/ https://bugzilla.redhat.com/show_bug.cgi?id=659861 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2358 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2396 Common Vulnerability Exposure (CVE) ID: CVE-2010-4261 http://xorl.wordpress.com/2010/12/05/cve-2010-4261-clamav-icon_cb-off-by-one/ https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2344 Common Vulnerability Exposure (CVE) ID: CVE-2010-4479 BugTraq ID: 45152 SuSE Security Announcement: SUSE-SR:2010:024 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-0179 Common Vulnerability Exposure (CVE) ID: CVE-2011-0180 Common Vulnerability Exposure (CVE) ID: CVE-2011-0170 http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=897 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17367 Common Vulnerability Exposure (CVE) ID: CVE-2011-0181 Common Vulnerability Exposure (CVE) ID: CVE-2011-0191 http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html BugTraq ID: 46657 http://www.securityfocus.com/bid/46657 Debian Security Information: DSA-2210 (Google Search) http://www.debian.org/security/2011/dsa-2210 http://www.mandriva.com/security/advisories?name=MDVSA-2011:064 http://secunia.com/advisories/43934 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html SuSE Security Announcement: SUSE-SR:2011:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html http://www.vupen.com/english/advisories/2011/0845 http://www.vupen.com/english/advisories/2011/0859 Common Vulnerability Exposure (CVE) ID: CVE-2011-0192 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html BugTraq ID: 46658 http://www.securityfocus.com/bid/46658 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html http://security.gentoo.org/glsa/glsa-201209-02.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:043 http://www.redhat.com/support/errata/RHSA-2011-0318.html http://www.securitytracker.com/id?1025153 http://secunia.com/advisories/43585 http://secunia.com/advisories/43593 http://secunia.com/advisories/43664 http://secunia.com/advisories/44117 http://secunia.com/advisories/44135 http://secunia.com/advisories/50726 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820 http://www.vupen.com/english/advisories/2011/0551 http://www.vupen.com/english/advisories/2011/0599 http://www.vupen.com/english/advisories/2011/0621 http://www.vupen.com/english/advisories/2011/0905 http://www.vupen.com/english/advisories/2011/0930 http://www.vupen.com/english/advisories/2011/0960 Common Vulnerability Exposure (CVE) ID: CVE-2011-0194 Common Vulnerability Exposure (CVE) ID: CVE-2011-0193 Common Vulnerability Exposure (CVE) ID: CVE-2011-0190 Common Vulnerability Exposure (CVE) ID: CVE-2010-1323 BugTraq ID: 45118 http://www.securityfocus.com/bid/45118 Bugtraq: 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021] (Google Search) http://www.securityfocus.com/archive/1/514953/100/0/threaded Bugtraq: 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console (Google Search) http://www.securityfocus.com/archive/1/517739/100/0/threaded Bugtraq: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (Google Search) http://www.securityfocus.com/archive/1/520102/100/0/threaded Debian Security Information: DSA-2129 (Google Search) http://www.debian.org/security/2010/dsa-2129 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html HPdes Security Advisory: HPSBOV02682 http://marc.info/?l=bugtraq&m=130497213107107&w=2 HPdes Security Advisory: HPSBUX02623 http://marc.info/?l=bugtraq&m=129562442714657&w=2 HPdes Security Advisory: SSRT100355 HPdes Security Advisory: SSRT100495 http://www.mandriva.com/security/advisories?name=MDVSA-2010:245 http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 http://lists.vmware.com/pipermail/security-announce/2011/000133.html http://osvdb.org/69610 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12121 http://www.redhat.com/support/errata/RHSA-2010-0925.html http://www.redhat.com/support/errata/RHSA-2010-0926.html http://www.securitytracker.com/id?1024803 http://secunia.com/advisories/42399 http://secunia.com/advisories/42420 http://secunia.com/advisories/42436 http://secunia.com/advisories/43015 http://secunia.com/advisories/46397 SuSE Security Announcement: SUSE-SR:2010:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html SuSE Security Announcement: SUSE-SU-2012:0010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html SuSE Security Announcement: SUSE-SU-2012:0042 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html http://www.ubuntu.com/usn/USN-1030-1 http://www.vupen.com/english/advisories/2010/3094 http://www.vupen.com/english/advisories/2010/3095 http://www.vupen.com/english/advisories/2010/3101 http://www.vupen.com/english/advisories/2010/3118 http://www.vupen.com/english/advisories/2011/0187 Common Vulnerability Exposure (CVE) ID: CVE-2010-1324 BugTraq ID: 45116 http://www.securityfocus.com/bid/45116 http://osvdb.org/69609 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936 Common Vulnerability Exposure (CVE) ID: CVE-2010-4020 BugTraq ID: 45117 http://www.securityfocus.com/bid/45117 http://osvdb.org/69608 Common Vulnerability Exposure (CVE) ID: CVE-2010-4021 BugTraq ID: 45122 http://www.securityfocus.com/bid/45122 http://osvdb.org/69607 Common Vulnerability Exposure (CVE) ID: CVE-2011-0182 http://securityreason.com/securityalert/8402 Common Vulnerability Exposure (CVE) ID: CVE-2011-0183 Common Vulnerability Exposure (CVE) ID: CVE-2010-4008 http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html BugTraq ID: 44779 http://www.securityfocus.com/bid/44779 Debian Security Information: DSA-2128 (Google Search) http://www.debian.org/security/2010/dsa-2128 HPdes Security Advisory: HPSBGN02970 http://marc.info/?l=bugtraq&m=139447903326211&w=2 HPdes Security Advisory: HPSBMA02662 http://marc.info/?l=bugtraq&m=130331363227777&w=2 HPdes Security Advisory: SSRT100409 http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/ http://mail.gnome.org/archives/xml/2010-November/msg00015.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12148 http://www.redhat.com/support/errata/RHSA-2011-1749.html RedHat Security Advisories: RHSA-2013:0217 http://rhn.redhat.com/errata/RHSA-2013-0217.html http://secunia.com/advisories/40775 http://secunia.com/advisories/42109 http://secunia.com/advisories/42175 http://secunia.com/advisories/42314 http://secunia.com/advisories/42429 http://www.ubuntu.com/usn/USN-1016-1 http://www.vupen.com/english/advisories/2010/3046 http://www.vupen.com/english/advisories/2010/3076 http://www.vupen.com/english/advisories/2010/3100 http://www.vupen.com/english/advisories/2011/0230 Common Vulnerability Exposure (CVE) ID: CVE-2010-4494 Debian Security Information: DSA-2137 (Google Search) http://www.debian.org/security/2010/dsa-2137 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055775.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11916 http://secunia.com/advisories/42472 http://secunia.com/advisories/42721 http://secunia.com/advisories/42762 http://www.vupen.com/english/advisories/2010/3319 http://www.vupen.com/english/advisories/2010/3336 Common Vulnerability Exposure (CVE) ID: CVE-2010-3089 41265 http://secunia.com/advisories/41265 42502 http://secunia.com/advisories/42502 43294 http://secunia.com/advisories/43294 43425 http://secunia.com/advisories/43425 43549 http://secunia.com/advisories/43549 43580 http://secunia.com/advisories/43580 ADV-2010-3271 http://www.vupen.com/english/advisories/2010/3271 ADV-2011-0436 http://www.vupen.com/english/advisories/2011/0436 ADV-2011-0460 http://www.vupen.com/english/advisories/2011/0460 ADV-2011-0542 http://www.vupen.com/english/advisories/2011/0542 DSA-2170 http://www.debian.org/security/2011/dsa-2170 FEDORA-2010-14834 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html FEDORA-2010-14877 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html RHSA-2011:0307 http://www.redhat.com/support/errata/RHSA-2011-0307.html RHSA-2011:0308 http://www.redhat.com/support/errata/RHSA-2011-0308.html SUSE-SR:2011:009 USN-1069-1 http://www.ubuntu.com/usn/USN-1069-1 [mailman-announce] 20100905 Mailman security patch. http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html [mailman-announce] 20100909 Mailman security patch. http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html [oss-security] 20100913 CVE Request: mailman http://marc.info/?l=oss-security&m=128438736513097&w=2 [oss-security] 20100913 Re: CVE Request: mailman http://marc.info/?l=oss-security&m=128440851513718&w=2 http://marc.info/?l=oss-security&m=128441135117819&w=2 http://marc.info/?l=oss-security&m=128441237618793&w=2 http://marc.info/?l=oss-security&m=128441369020123&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=631859 https://bugzilla.redhat.com/show_bug.cgi?id=631881 https://launchpad.net/mailman/+milestone/2.1.14rc1 openSUSE-SU-2011:0424 http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2006-7243 BugTraq ID: 44951 http://www.securityfocus.com/bid/44951 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html HPdes Security Advisory: HPSBOV02763 http://marc.info/?l=bugtraq&m=133469208622507&w=2 HPdes Security Advisory: HPSBUX02741 http://marc.info/?l=bugtraq&m=132871655717248&w=2 HPdes Security Advisory: SSRT100728 HPdes Security Advisory: SSRT100826 http://www.mandriva.com/security/advisories?name=MDVSA-2010:254 http://www.madirish.net/?article=436 http://openwall.com/lists/oss-security/2010/11/18/4 http://openwall.com/lists/oss-security/2010/11/18/5 http://openwall.com/lists/oss-security/2010/12/09/10 http://openwall.com/lists/oss-security/2010/12/09/11 http://openwall.com/lists/oss-security/2010/12/09/9 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12569 RedHat Security Advisories: RHSA-2013:1307 http://rhn.redhat.com/errata/RHSA-2013-1307.html RedHat Security Advisories: RHSA-2013:1615 http://rhn.redhat.com/errata/RHSA-2013-1615.html RedHat Security Advisories: RHSA-2014:0311 http://rhn.redhat.com/errata/RHSA-2014-0311.html http://secunia.com/advisories/55078 Common Vulnerability Exposure (CVE) ID: CVE-2010-2950 http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2010-3709 1024690 http://www.securitytracker.com/id?1024690 15431 http://www.exploit-db.com/exploits/15431 20101105 PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference http://securityreason.com/achievement_securityalert/90 42729 http://secunia.com/advisories/42729 42812 http://secunia.com/advisories/42812 44718 http://www.securityfocus.com/bid/44718 ADV-2010-3313 http://www.vupen.com/english/advisories/2010/3313 ADV-2011-0020 http://www.vupen.com/english/advisories/2011/0020 ADV-2011-0021 http://www.vupen.com/english/advisories/2011/0021 ADV-2011-0077 http://www.vupen.com/english/advisories/2011/0077 FEDORA-2010-18976 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html FEDORA-2010-19011 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html HPSBMA02662 HPSBOV02763 MDVSA-2010:218 http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 RHSA-2011:0195 http://www.redhat.com/support/errata/RHSA-2011-0195.html SSA:2010-357-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 SSRT100409 SSRT100826 USN-1042-1 http://www.ubuntu.com/usn/USN-1042-1 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log http://www.php.net/ChangeLog-5.php http://www.php.net/archive/2010.php#id2010-12-10-1 http://www.php.net/releases/5_2_15.php http://www.php.net/releases/5_3_4.php Common Vulnerability Exposure (CVE) ID: CVE-2010-3710 43189 http://secunia.com/advisories/43189 43926 http://www.securityfocus.com/bid/43926 RHSA-2011:0196 http://www.redhat.com/support/errata/RHSA-2011-0196.html SUSE-SR:2010:023 http://bugs.php.net/bug.php?id=52929 Common Vulnerability Exposure (CVE) ID: CVE-2010-4409 BugTraq ID: 45119 http://www.securityfocus.com/bid/45119 Bugtraq: 20101210 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow (Google Search) http://www.securityfocus.com/archive/1/515142/100/0/threaded CERT/CC vulnerability note: VU#479900 http://www.kb.cert.org/vuls/id/479900 http://www.exploit-db.com/exploits/15722 http://www.mandriva.com/security/advisories?name=MDVSA-2010:255 http://secunia.com/advisories/47674 SuSE Security Announcement: openSUSE-SU-2012:0100 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html Common Vulnerability Exposure (CVE) ID: CVE-2010-3436 44723 http://www.securityfocus.com/bid/44723 APPLE-SA-2011-10-12-3 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://security-tracker.debian.org/tracker/CVE-2010-3436 http://support.apple.com/kb/HT5002 http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824 http://svn.php.net/viewvc?view=revision&revision=303824 Common Vulnerability Exposure (CVE) ID: CVE-2011-0184 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=898 Common Vulnerability Exposure (CVE) ID: CVE-2011-1417 http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00005.html http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 http://www.zdnet.com/blog/security/charlie-miller-wins-pwn2own-again-with-iphone-4-exploit/8378 http://www.zerodayinitiative.com/advisories/ZDI-11-109/ http://secunia.com/advisories/44154 Common Vulnerability Exposure (CVE) ID: CVE-2011-0186 http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4009 http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16218 http://www.securitytracker.com/id?1024830 Common Vulnerability Exposure (CVE) ID: CVE-2010-3801 http://zerodayinitiative.com/advisories/ZDI-10-259/ http://osvdb.org/69755 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15642 Common Vulnerability Exposure (CVE) ID: CVE-2011-0187 Common Vulnerability Exposure (CVE) ID: CVE-2010-3802 http://zerodayinitiative.com/advisories/ZDI-10-260/ http://osvdb.org/69756 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16105 Common Vulnerability Exposure (CVE) ID: CVE-2011-0188 http://www.mandriva.com/security/advisories?name=MDVSA-2011:097 http://www.mandriva.com/security/advisories?name=MDVSA-2011:098 http://www.redhat.com/support/errata/RHSA-2011-0908.html http://www.redhat.com/support/errata/RHSA-2011-0909.html http://www.redhat.com/support/errata/RHSA-2011-0910.html http://www.securitytracker.com/id?1025236 Common Vulnerability Exposure (CVE) ID: CVE-2010-3069 1024434 http://www.securitytracker.com/id?1024434 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console 41354 http://secunia.com/advisories/41354 41447 http://secunia.com/advisories/41447 42531 http://secunia.com/advisories/42531 42885 http://secunia.com/advisories/42885 43212 http://www.securityfocus.com/bid/43212 ADV-2010-2378 http://www.vupen.com/english/advisories/2010/2378 ADV-2010-3126 ADV-2011-0091 http://www.vupen.com/english/advisories/2011/0091 APPLE-SA-2011-06-23-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html FEDORA-2010-14627 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html FEDORA-2010-14678 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html FEDORA-2010-14768 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html HPSBUX02657 http://marc.info/?l=bugtraq&m=130835366526620&w=2 RHSA-2010:0860 http://www.redhat.com/support/errata/RHSA-2010-0860.html SSRT100460 SUSE-SR:2010:018 SUSE-SR:2010:019 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html USN-987-1 http://www.ubuntu.com/usn/USN-987-1 http://support.apple.com/kb/HT4723 http://us1.samba.org/samba/history/samba-3.5.5.html http://us1.samba.org/samba/security/CVE-2010-3069.html http://www.vmware.com/security/advisories/VMSA-2010-0019.html samba-sidparse-bo(61773) https://exchange.xforce.ibmcloud.com/vulnerabilities/61773 Common Vulnerability Exposure (CVE) ID: CVE-2010-3315 41652 http://secunia.com/advisories/41652 43139 http://secunia.com/advisories/43139 43346 http://secunia.com/advisories/43346 ADV-2011-0264 http://www.vupen.com/english/advisories/2011/0264 DSA-2118 http://www.debian.org/security/2010/dsa-2118 MDVSA-2010:199 http://www.mandriva.com/security/advisories?name=MDVSA-2010:199 RHSA-2011:0258 http://www.redhat.com/support/errata/RHSA-2011-0258.html USN-1053-1 http://www.ubuntu.com/usn/USN-1053-1 http://security-tracker.debian.org/tracker/CVE-2010-3315 http://subversion.apache.org/security/CVE-2010-3315-advisory.txt oval:org.mitre.oval:def:19007 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007 Common Vulnerability Exposure (CVE) ID: CVE-2011-0189 Common Vulnerability Exposure (CVE) ID: CVE-2010-3814 BugTraq ID: 44643 http://www.securityfocus.com/bid/44643 Debian Security Information: DSA-2155 (Google Search) http://www.debian.org/security/2011/dsa-2155 http://www.mandriva.com/security/advisories?name=MDVSA-2010:236 http://www.securitytracker.com/id?1024767 http://secunia.com/advisories/43138 http://secunia.com/advisories/48951 http://www.ubuntu.com/usn/USN-1013-1 http://www.vupen.com/english/advisories/2011/0246 Common Vulnerability Exposure (CVE) ID: CVE-2010-3855 1024745 http://www.securitytracker.com/id?1024745 42289 http://secunia.com/advisories/42289 42295 http://secunia.com/advisories/42295 43138 44214 http://www.securityfocus.com/bid/44214 48951 ADV-2010-3037 http://www.vupen.com/english/advisories/2010/3037 ADV-2011-0246 APPLE-SA-2011-03-09-1 APPLE-SA-2011-03-09-3 APPLE-SA-2011-07-15-1 http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html APPLE-SA-2011-07-15-2 http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html DSA-2155 FEDORA-2010-17728 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051231.html FEDORA-2010-17742 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050965.html FEDORA-2010-17755 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051251.html MDVSA-2010:235 http://www.mandriva.com/security/advisories?name=MDVSA-2010:235 MDVSA-2010:236 RHSA-2010:0889 http://www.redhat.com/support/errata/RHSA-2010-0889.html USN-1013-1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a http://support.apple.com/kb/HT4564 http://support.apple.com/kb/HT4565 http://support.apple.com/kb/HT4802 http://support.apple.com/kb/HT4803 http://support.avaya.com/css/P8/documents/100122733 https://savannah.nongnu.org/bugs/?31310 Common Vulnerability Exposure (CVE) ID: CVE-2010-3870 1024797 http://www.securitytracker.com/id?1024797 42410 http://secunia.com/advisories/42410 44605 http://www.securityfocus.com/bid/44605 ADV-2010-3081 http://www.vupen.com/english/advisories/2010/3081 MDVSA-2010:224 http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224 RHSA-2010:0919 http://www.redhat.com/support/errata/RHSA-2010-0919.html [oss-security] 20101102 Re: utf-8 security issue in php http://www.openwall.com/lists/oss-security/2010/11/02/11 http://www.openwall.com/lists/oss-security/2010/11/02/2 http://www.openwall.com/lists/oss-security/2010/11/02/4 http://www.openwall.com/lists/oss-security/2010/11/02/6 http://www.openwall.com/lists/oss-security/2010/11/02/8 [oss-security] 20101102 utf-8 security issue in php http://www.openwall.com/lists/oss-security/2010/11/02/1 [oss-security] 20101103 Re: utf-8 security issue in php http://www.openwall.com/lists/oss-security/2010/11/03/1 http://bugs.php.net/bug.php?id=48230 http://bugs.php.net/bug.php?id=49687 http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html http://svn.php.net/viewvc?view=revision&revision=304959 http://us2.php.net/manual/en/function.utf8-decode.php#83935 http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/ http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf Common Vulnerability Exposure (CVE) ID: CVE-2010-4150 BugTraq ID: 44980 http://www.securityfocus.com/bid/44980 http://www.mandriva.com/security/advisories?name=MDVSA-2010:239 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12489 http://www.securitytracker.com/id?1024761 http://www.vupen.com/english/advisories/2010/3027 XForce ISS Database: php-phpimapc-dos(63390) https://exchange.xforce.ibmcloud.com/vulnerabilities/63390
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.