Test ID:	1.3.6.1.4.1.25623.1.0.102025
Category:	Mac OS X Local Security Checks
Title:	Mac OS X Security Update 2008-007
Summary:	The remote host is missing Security Update 2008-007.
Description:	Summary: The remote host is missing Security Update 2008-007. Affected Software/OS: One or more of the following components are affected: Apache Certificates ClamAV ColorSync CUPS Finder launchd libxslt MySQL Server Networking PHP Postfix PSNormalizer QuickLook rlogin Script Editor Single Sign-On Tomcat vim Weblog Solution: Update your Mac OS X operating system. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6420 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html BugTraq ID: 27236 http://www.securityfocus.com/bid/27236 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 Bugtraq: 20080110 SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability (Google Search) http://www.securityfocus.com/archive/1/486169/100/0/threaded Bugtraq: 20080729 rPSA-2008-0236-1 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/494858/100/0/threaded http://security.gentoo.org/glsa/glsa-200807-06.xml HPdes Security Advisory: HPSBUX02401 http://marc.info/?l=bugtraq&m=123376588623823&w=2 HPdes Security Advisory: SSRT090005 https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8371 http://www.redhat.com/support/errata/RHSA-2008-0966.html http://secunia.com/advisories/31026 http://secunia.com/advisories/32222 http://secunia.com/advisories/33797 http://secunia.com/advisories/34219 http://securityreason.com/securityalert/3523 SuSE Security Announcement: SUSE-SR:2008:024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html http://www.ubuntu.com/usn/USN-731-1 http://www.vupen.com/english/advisories/2008/2780 http://www.vupen.com/english/advisories/2009/0320 Common Vulnerability Exposure (CVE) ID: CVE-2008-1678 BugTraq ID: 31692 http://www.securityfocus.com/bid/31692 https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 http://marc.info/?l=openssl-dev&m=121060672602371&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754 http://www.redhat.com/support/errata/RHSA-2009-1075.html http://secunia.com/advisories/31416 http://secunia.com/advisories/35264 http://secunia.com/advisories/38761 http://secunia.com/advisories/42724 http://secunia.com/advisories/42733 http://secunia.com/advisories/44183 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 http://securityreason.com/securityalert/3981 XForce ISS Database: openssl-libssl-dos(43948) https://exchange.xforce.ibmcloud.com/vulnerabilities/43948 Common Vulnerability Exposure (CVE) ID: CVE-2008-2364 AIX APAR: PK67579 http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579 BugTraq ID: 29653 http://www.securityfocus.com/bid/29653 Bugtraq: 20081122 rPSA-2008-0328-1 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/498567/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00153.html HPdes Security Advisory: HPSBUX02365 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 HPdes Security Advisory: HPSBUX02465 http://marc.info/?l=bugtraq&m=125631037611762&w=2 HPdes Security Advisory: SSRT080118 HPdes Security Advisory: SSRT090192 http://www.mandriva.com/security/advisories?name=MDVSA-2008:195 http://www.mandriva.com/security/advisories?name=MDVSA-2008:237 https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11713 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6084 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9577 RedHat Security Advisories: RHSA-2008:0967 http://rhn.redhat.com/errata/RHSA-2008-0967.html http://www.securitytracker.com/id?1020267 http://secunia.com/advisories/30621 http://secunia.com/advisories/31404 http://secunia.com/advisories/31651 http://secunia.com/advisories/31904 http://secunia.com/advisories/32685 http://secunia.com/advisories/32838 http://secunia.com/advisories/33156 http://secunia.com/advisories/34259 http://secunia.com/advisories/34418 http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1 SuSE Security Announcement: SUSE-SR:2009:006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html SuSE Security Announcement: SUSE-SR:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html http://www.vupen.com/english/advisories/2008/1798 XForce ISS Database: apache-modproxy-module-dos(42987) https://exchange.xforce.ibmcloud.com/vulnerabilities/42987 Common Vulnerability Exposure (CVE) ID: CVE-2008-1389 BugTraq ID: 30994 http://www.securityfocus.com/bid/30994 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html http://security.gentoo.org/glsa/glsa-200809-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 http://int21.de/cve/CVE-2008-1389-clamav-chd.html http://www.securitytracker.com/id?1020805 http://secunia.com/advisories/31725 http://secunia.com/advisories/31906 http://secunia.com/advisories/31982 http://secunia.com/advisories/32030 http://secunia.com/advisories/32699 SuSE Security Announcement: SUSE-SR:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html http://www.vupen.com/english/advisories/2008/2484 http://www.vupen.com/english/advisories/2008/2564 Common Vulnerability Exposure (CVE) ID: CVE-2008-3912 BugTraq ID: 31051 http://www.securityfocus.com/bid/31051 Debian Security Information: DSA-1660 (Google Search) http://www.debian.org/security/2008/dsa-1660 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 http://www.openwall.com/lists/oss-security/2008/09/03/2 http://www.openwall.com/lists/oss-security/2008/09/04/13 http://www.securitytracker.com/id?1020828 http://secunia.com/advisories/32424 XForce ISS Database: clamav-libclamav-dos(45056) https://exchange.xforce.ibmcloud.com/vulnerabilities/45056 Common Vulnerability Exposure (CVE) ID: CVE-2008-3913 XForce ISS Database: clamav-manager-dos(45057) https://exchange.xforce.ibmcloud.com/vulnerabilities/45057 Common Vulnerability Exposure (CVE) ID: CVE-2008-3914 XForce ISS Database: clamav-multiple-unspecified(45058) https://exchange.xforce.ibmcloud.com/vulnerabilities/45058 Common Vulnerability Exposure (CVE) ID: CVE-2008-3642 http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html BugTraq ID: 31715 http://www.securityfocus.com/bid/31715 http://www.securitytracker.com/id?1021023 http://secunia.com/advisories/32706 XForce ISS Database: macosx-colorsync-bo(45778) https://exchange.xforce.ibmcloud.com/vulnerabilities/45778 Common Vulnerability Exposure (CVE) ID: CVE-2008-3641 BugTraq ID: 31688 http://www.securityfocus.com/bid/31688 Bugtraq: 20081010 ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/497221/100/0/threaded Debian Security Information: DSA-1656 (Google Search) http://www.debian.org/security/2008/dsa-1656 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:211 http://www.zerodayinitiative.com/advisories/ZDI-08-067 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666 http://www.redhat.com/support/errata/RHSA-2008-0937.html http://www.securitytracker.com/id?1021031 http://secunia.com/advisories/32084 http://secunia.com/advisories/32226 http://secunia.com/advisories/32284 http://secunia.com/advisories/32292 http://secunia.com/advisories/32316 http://secunia.com/advisories/32331 http://secunia.com/advisories/33085 http://secunia.com/advisories/33111 http://secunia.com/advisories/33568 http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1 SuSE Security Announcement: SUSE-SR:2008:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html SuSE Security Announcement: SUSE-SR:2009:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html https://usn.ubuntu.com/656-1/ http://www.vupen.com/english/advisories/2008/2782 http://www.vupen.com/english/advisories/2008/3401 http://www.vupen.com/english/advisories/2009/1568 XForce ISS Database: cups-hpgl-code-execution(45779) https://exchange.xforce.ibmcloud.com/vulnerabilities/45779 Common Vulnerability Exposure (CVE) ID: CVE-2008-3643 BugTraq ID: 31720 http://www.securityfocus.com/bid/31720 http://www.securitytracker.com/id?1021024 XForce ISS Database: macosx-finder-dos(45780) https://exchange.xforce.ibmcloud.com/vulnerabilities/45780 Common Vulnerability Exposure (CVE) ID: CVE-2008-1767 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html BugTraq ID: 29312 http://www.securityfocus.com/bid/29312 Debian Security Information: DSA-1589 (Google Search) http://www.debian.org/security/2008/dsa-1589 http://security.gentoo.org/glsa/glsa-200806-02.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:151 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785 http://www.redhat.com/support/errata/RHSA-2008-0287.html http://www.securitytracker.com/id?1020071 http://secunia.com/advisories/30315 http://secunia.com/advisories/30323 http://secunia.com/advisories/30393 http://secunia.com/advisories/30521 http://secunia.com/advisories/30717 http://secunia.com/advisories/31074 http://secunia.com/advisories/31363 SuSE Security Announcement: SUSE-SR:2008:013 (Google Search) http://www.novell.com/linux/security/advisories/2008_13_sr.html http://www.ubuntu.com/usn/usn-633-1 http://www.vupen.com/english/advisories/2008/1580/references http://www.vupen.com/english/advisories/2008/2094/references XForce ISS Database: libxslt-xsl-bo(42560) https://exchange.xforce.ibmcloud.com/vulnerabilities/42560 Common Vulnerability Exposure (CVE) ID: CVE-2007-2691 BugTraq ID: 24016 http://www.securityfocus.com/bid/24016 Bugtraq: 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server (Google Search) http://www.securityfocus.com/archive/1/473874/100/0/threaded Debian Security Information: DSA-1413 (Google Search) http://www.debian.org/security/2007/dsa-1413 http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 http://bugs.mysql.com/bug.php?id=27515 http://lists.mysql.com/announce/470 http://osvdb.org/34766 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559 http://www.redhat.com/support/errata/RHSA-2007-0894.html http://www.redhat.com/support/errata/RHSA-2008-0364.html http://www.redhat.com/support/errata/RHSA-2008-0768.html http://www.securitytracker.com/id?1018069 http://secunia.com/advisories/25301 http://secunia.com/advisories/25946 http://secunia.com/advisories/26073 http://secunia.com/advisories/26430 http://secunia.com/advisories/27155 http://secunia.com/advisories/27823 http://secunia.com/advisories/28838 http://secunia.com/advisories/30351 http://secunia.com/advisories/31226 SuSE Security Announcement: SUSE-SR:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html https://usn.ubuntu.com/528-1/ http://www.vupen.com/english/advisories/2007/1804 XForce ISS Database: mysql-renametable-weak-security(34347) https://exchange.xforce.ibmcloud.com/vulnerabilities/34347 Common Vulnerability Exposure (CVE) ID: CVE-2007-5969 BugTraq ID: 26765 http://www.securityfocus.com/bid/26765 Bugtraq: 20080117 rPSA-2008-0018-1 mysql mysql-bench mysql-server (Google Search) http://www.securityfocus.com/archive/1/486477/100/0/threaded Debian Security Information: DSA-1451 (Google Search) http://www.debian.org/security/2008/dsa-1451 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html http://security.gentoo.org/glsa/glsa-200804-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:243 http://lists.mysql.com/announce/495 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10509 http://www.redhat.com/support/errata/RHSA-2007-1155.html http://www.redhat.com/support/errata/RHSA-2007-1157.html http://www.securitytracker.com/id?1019060 http://secunia.com/advisories/27981 http://secunia.com/advisories/28025 http://secunia.com/advisories/28040 http://secunia.com/advisories/28063 http://secunia.com/advisories/28099 http://secunia.com/advisories/28108 http://secunia.com/advisories/28128 http://secunia.com/advisories/28343 http://secunia.com/advisories/28559 http://secunia.com/advisories/29706 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959 https://usn.ubuntu.com/559-1/ http://www.vupen.com/english/advisories/2007/4142 http://www.vupen.com/english/advisories/2007/4198 http://www.vupen.com/english/advisories/2008/0560/references http://www.vupen.com/english/advisories/2008/1000/references Common Vulnerability Exposure (CVE) ID: CVE-2008-0226 BugTraq ID: 27140 http://www.securityfocus.com/bid/27140 Bugtraq: 20080104 Multiple vulnerabilities in yaSSL 1.7.5 (Google Search) http://www.securityfocus.com/archive/1/485810/100/0/threaded Bugtraq: 20080104 Pre-auth buffer-overflow in mySQL through yaSSL (Google Search) http://www.securityfocus.com/archive/1/485811/100/0/threaded Debian Security Information: DSA-1478 (Google Search) http://www.debian.org/security/2008/dsa-1478 http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 http://secunia.com/advisories/28324 http://secunia.com/advisories/28419 http://secunia.com/advisories/28597 http://secunia.com/advisories/29443 http://securityreason.com/securityalert/3531 http://www.ubuntu.com/usn/usn-588-1 XForce ISS Database: yassl-inputbufferoperator-bo(39431) https://exchange.xforce.ibmcloud.com/vulnerabilities/39431 XForce ISS Database: yassl-processoldclienthello-bo(39429) https://exchange.xforce.ibmcloud.com/vulnerabilities/39429 Common Vulnerability Exposure (CVE) ID: CVE-2008-0227 XForce ISS Database: yassl-hashwithtransformupdate-dos(39433) https://exchange.xforce.ibmcloud.com/vulnerabilities/39433 Common Vulnerability Exposure (CVE) ID: CVE-2008-2079 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html BugTraq ID: 29106 http://www.securityfocus.com/bid/29106 Debian Security Information: DSA-1608 (Google Search) http://www.debian.org/security/2008/dsa-1608 http://www.mandriva.com/security/advisories?name=MDVSA-2008:149 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133 http://www.redhat.com/support/errata/RHSA-2008-0505.html http://www.redhat.com/support/errata/RHSA-2008-0510.html http://www.redhat.com/support/errata/RHSA-2009-1289.html http://www.securitytracker.com/id?1019995 http://secunia.com/advisories/30134 http://secunia.com/advisories/31066 http://secunia.com/advisories/31687 http://secunia.com/advisories/32769 http://secunia.com/advisories/36566 http://secunia.com/advisories/36701 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/USN-671-1 http://www.vupen.com/english/advisories/2008/1472/references XForce ISS Database: mysql-myisam-security-bypass(42267) https://exchange.xforce.ibmcloud.com/vulnerabilities/42267 Common Vulnerability Exposure (CVE) ID: CVE-2008-3645 BugTraq ID: 31711 http://www.securityfocus.com/bid/31711 http://www.securitytracker.com/id?1021025 XForce ISS Database: macosx-eapolcontroller-bo(45781) https://exchange.xforce.ibmcloud.com/vulnerabilities/45781 Common Vulnerability Exposure (CVE) ID: CVE-2007-4850 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html BugTraq ID: 27413 http://www.securityfocus.com/bid/27413 BugTraq ID: 29009 http://www.securityfocus.com/bid/29009 Bugtraq: 20080122 PHP 5.2.5 cURL safe_mode bypass (Google Search) http://www.securityfocus.com/archive/1/486856/100/0/threaded Bugtraq: 20080527 rPSA-2008-0178-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/492671/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059849.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 http://www.openwall.com/lists/oss-security/2008/05/02/2 http://secunia.com/advisories/30048 http://secunia.com/advisories/30411 http://secunia.com/advisories/31200 http://secunia.com/advisories/31326 http://securityreason.com/securityalert/3562 http://securityreason.com/achievement_securityalert/51 http://www.ubuntu.com/usn/usn-628-1 http://www.vupen.com/english/advisories/2008/1412 http://www.vupen.com/english/advisories/2008/2268 XForce ISS Database: php-curlinit-security-bypass(39852) https://exchange.xforce.ibmcloud.com/vulnerabilities/39852 XForce ISS Database: php-safemode-directive-security-bypass(42134) https://exchange.xforce.ibmcloud.com/vulnerabilities/42134 Common Vulnerability Exposure (CVE) ID: CVE-2008-0674 http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html BugTraq ID: 27786 http://www.securityfocus.com/bid/27786 Bugtraq: 20080228 rPSA-2008-0086-1 pcre (Google Search) http://www.securityfocus.com/archive/1/488927/100/0/threaded Bugtraq: 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl (Google Search) http://www.securityfocus.com/archive/1/492535/100/0/threaded Cert/CC Advisory: TA09-218A http://www.us-cert.gov/cas/techalerts/TA09-218A.html Debian Security Information: DSA-1499 (Google Search) http://www.debian.org/security/2008/dsa-1499 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html http://security.gentoo.org/glsa/glsa-200803-24.xml http://security.gentoo.org/glsa/glsa-200811-05.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 http://www.securitytracker.com/id?1022674 http://secunia.com/advisories/28923 http://secunia.com/advisories/28957 http://secunia.com/advisories/28960 http://secunia.com/advisories/28985 http://secunia.com/advisories/28996 http://secunia.com/advisories/29027 http://secunia.com/advisories/29048 http://secunia.com/advisories/29175 http://secunia.com/advisories/29267 http://secunia.com/advisories/29282 http://secunia.com/advisories/30345 http://secunia.com/advisories/32746 http://secunia.com/advisories/36096 SuSE Security Announcement: SUSE-SR:2008:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html https://usn.ubuntu.com/581-1/ http://www.vupen.com/english/advisories/2008/0570 http://www.vupen.com/english/advisories/2008/0592 http://www.vupen.com/english/advisories/2009/2172 XForce ISS Database: pcre-characterclass-bo(40505) https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 Common Vulnerability Exposure (CVE) ID: CVE-2008-2371 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html BugTraq ID: 30087 http://www.securityfocus.com/bid/30087 Bugtraq: 20081027 rPSA-2008-0305-1 pcre (Google Search) http://www.securityfocus.com/archive/1/497828/100/0/threaded Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Debian Security Information: DSA-1602 (Google Search) http://www.debian.org/security/2008/dsa-1602 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml HPdes Security Advisory: HPSBUX02431 http://marc.info/?l=bugtraq&m=124654546101607&w=2 HPdes Security Advisory: SSRT090085 http://www.mandriva.com/security/advisories?name=MDVSA-2008:147 http://secunia.com/advisories/30916 http://secunia.com/advisories/30944 http://secunia.com/advisories/30945 http://secunia.com/advisories/30958 http://secunia.com/advisories/30961 http://secunia.com/advisories/30967 http://secunia.com/advisories/30972 http://secunia.com/advisories/30990 http://secunia.com/advisories/32454 http://secunia.com/advisories/35074 http://secunia.com/advisories/35650 http://secunia.com/advisories/39300 SuSE Security Announcement: SUSE-SR:2008:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://www.ubuntu.com/usn/usn-624-1 http://ubuntu.com/usn/usn-624-2 http://www.vupen.com/english/advisories/2008/2005 http://www.vupen.com/english/advisories/2008/2006 http://www.vupen.com/english/advisories/2008/2336 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2010/0833 Common Vulnerability Exposure (CVE) ID: CVE-2008-3646 BugTraq ID: 31721 http://www.securityfocus.com/bid/31721 XForce ISS Database: macosx-postfix-configfile-weak-security(45876) https://exchange.xforce.ibmcloud.com/vulnerabilities/45876 Common Vulnerability Exposure (CVE) ID: CVE-2008-3647 BugTraq ID: 31719 http://www.securityfocus.com/bid/31719 http://www.securitytracker.com/id?1021026 XForce ISS Database: macosx-psnormalizer-bo(45783) https://exchange.xforce.ibmcloud.com/vulnerabilities/45783 Common Vulnerability Exposure (CVE) ID: CVE-2008-4211 http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html BugTraq ID: 31707 http://www.securityfocus.com/bid/31707 http://www.securitytracker.com/id?1021027 http://secunia.com/advisories/32756 http://www.vupen.com/english/advisories/2008/3232 XForce ISS Database: macosx-quicklook2-code-execution(45784) https://exchange.xforce.ibmcloud.com/vulnerabilities/45784 Common Vulnerability Exposure (CVE) ID: CVE-2008-4212 BugTraq ID: 31708 http://www.securityfocus.com/bid/31708 http://www.securitytracker.com/id?1021028 XForce ISS Database: macosx-rlogin-weak-security(45785) https://exchange.xforce.ibmcloud.com/vulnerabilities/45785 Common Vulnerability Exposure (CVE) ID: CVE-2008-4214 BugTraq ID: 31716 http://www.securityfocus.com/bid/31716 http://www.securitytracker.com/id?1021029 XForce ISS Database: macosx-scripteditor-symlink(45786) https://exchange.xforce.ibmcloud.com/vulnerabilities/45786 Common Vulnerability Exposure (CVE) ID: CVE-2007-6286 Bugtraq: 20080208 [SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability (Google Search) http://www.securityfocus.com/archive/1/487823/100/0/threaded Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html http://security.gentoo.org/glsa/glsa-200804-10.xml HPdes Security Advisory: HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E http://secunia.com/advisories/28878 http://secunia.com/advisories/28915 http://secunia.com/advisories/29711 http://secunia.com/advisories/30676 http://secunia.com/advisories/37460 http://secunia.com/advisories/57126 http://securityreason.com/securityalert/3637 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.vupen.com/english/advisories/2008/0488 http://www.vupen.com/english/advisories/2008/1856/references http://www.vupen.com/english/advisories/2009/3316 Common Vulnerability Exposure (CVE) ID: CVE-2008-0002 BugTraq ID: 27703 http://www.securityfocus.com/bid/27703 Bugtraq: 20080208 CVE-2008-0002: Tomcat information disclosure vulnerability (Google Search) http://www.securityfocus.com/archive/1/487812/100/0/threaded http://secunia.com/advisories/28834 http://securityreason.com/securityalert/3638 Common Vulnerability Exposure (CVE) ID: CVE-2008-1232 BugTraq ID: 30496 http://www.securityfocus.com/bid/30496 Bugtraq: 20080801 [CVE-2008-1232] Apache Tomcat XSS vulnerability (Google Search) http://www.securityfocus.com/archive/1/495021/100/0/threaded Bugtraq: 20090616 CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability (Google Search) http://www.securityfocus.com/archive/1/504351/100/0/threaded Bugtraq: 20090806 CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management (Google Search) http://www.securityfocus.com/archive/1/505556/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11181 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985 http://www.redhat.com/support/errata/RHSA-2008-0648.html http://www.redhat.com/support/errata/RHSA-2008-0862.html http://www.redhat.com/support/errata/RHSA-2008-0864.html http://www.securitytracker.com/id?1020622 http://secunia.com/advisories/31379 http://secunia.com/advisories/31381 http://secunia.com/advisories/31639 http://secunia.com/advisories/31865 http://secunia.com/advisories/31891 http://secunia.com/advisories/32120 http://secunia.com/advisories/32266 http://secunia.com/advisories/33999 http://secunia.com/advisories/34013 http://secunia.com/advisories/35474 http://secunia.com/advisories/36108 http://securityreason.com/securityalert/4098 http://www.vupen.com/english/advisories/2008/2305 http://www.vupen.com/english/advisories/2008/2823 http://www.vupen.com/english/advisories/2009/0503 http://www.vupen.com/english/advisories/2009/1609 http://www.vupen.com/english/advisories/2009/2194 XForce ISS Database: tomcat-httpservletresponse-xss(44155) https://exchange.xforce.ibmcloud.com/vulnerabilities/44155 Common Vulnerability Exposure (CVE) ID: CVE-2008-1947 BugTraq ID: 29502 http://www.securityfocus.com/bid/29502 Bugtraq: 20080602 [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability (Google Search) http://www.securityfocus.com/archive/1/492958/100/0/threaded Debian Security Information: DSA-1593 (Google Search) http://www.debian.org/security/2008/dsa-1593 http://marc.info/?l=tomcat-user&m=121244319501278&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009 http://www.securitytracker.com/id?1020624 http://secunia.com/advisories/30500 http://secunia.com/advisories/30592 http://www.vupen.com/english/advisories/2008/1725 XForce ISS Database: apache-tomcat-hostmanager-xss(42816) https://exchange.xforce.ibmcloud.com/vulnerabilities/42816 Common Vulnerability Exposure (CVE) ID: CVE-2008-2370 BugTraq ID: 30494 http://www.securityfocus.com/bid/30494 Bugtraq: 20080801 [CVE-2008-2370] Apache Tomcat information disclosure vulnerability (Google Search) http://www.securityfocus.com/archive/1/495022/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10577 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5876 http://www.securitytracker.com/id?1020623 http://secunia.com/advisories/35393 http://secunia.com/advisories/36249 http://securityreason.com/securityalert/4099 http://www.vupen.com/english/advisories/2009/1535 http://www.vupen.com/english/advisories/2009/2215 XForce ISS Database: tomcat-requestdispatcher-info-disclosure(44156) https://exchange.xforce.ibmcloud.com/vulnerabilities/44156 Common Vulnerability Exposure (CVE) ID: CVE-2008-2938 BugTraq ID: 30633 http://www.securityfocus.com/bid/30633 Bugtraq: 20080811 Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability (Google Search) http://www.securityfocus.com/archive/1/495318/100/0/threaded Bugtraq: 20091107 ToutVirtual VirtualIQ Multiple Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/507729/100/0/threaded CERT/CC vulnerability note: VU#343355 http://www.kb.cert.org/vuls/id/343355 https://www.exploit-db.com/exploits/6229 http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587 http://www.securitytracker.com/id?1020665 http://secunia.com/advisories/37297 http://securityreason.com/securityalert/4148 http://www.vupen.com/english/advisories/2008/2343 XForce ISS Database: tomcat-allowlinking-utf8-directory-traversal(44411) https://exchange.xforce.ibmcloud.com/vulnerabilities/44411 Common Vulnerability Exposure (CVE) ID: CVE-2007-5333 AIX APAR: IZ20133 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133 AIX APAR: IZ20991 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991 http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html BugTraq ID: 27706 http://www.securityfocus.com/bid/27706 Bugtraq: 20080208 [SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/487822/100/0/threaded http://jvn.jp/jp/JVN%2309470767/index.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:018 http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177 http://secunia.com/advisories/28884 http://secunia.com/advisories/30802 http://secunia.com/advisories/32036 http://secunia.com/advisories/33330 http://securityreason.com/securityalert/3636 http://www.vupen.com/english/advisories/2008/1981/references http://www.vupen.com/english/advisories/2008/2690 Common Vulnerability Exposure (CVE) ID: CVE-2007-5342 BugTraq ID: 27006 http://www.securityfocus.com/bid/27006 Bugtraq: 20071223 [CVE-2007-5342] Apache Tomcat's default security policy is too open (Google Search) http://www.securityfocus.com/archive/1/485481/100/0/threaded Debian Security Information: DSA-1447 (Google Search) http://www.debian.org/security/2008/dsa-1447 http://svn.apache.org/viewvc?view=rev&revision=606594 http://osvdb.org/39833 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10417 http://www.redhat.com/support/errata/RHSA-2008-0042.html http://www.redhat.com/support/errata/RHSA-2008-0195.html http://www.redhat.com/support/errata/RHSA-2008-0831.html http://www.redhat.com/support/errata/RHSA-2008-0832.html http://www.redhat.com/support/errata/RHSA-2008-0833.html http://www.redhat.com/support/errata/RHSA-2008-0834.html http://secunia.com/advisories/28274 http://secunia.com/advisories/28317 http://secunia.com/advisories/29313 http://securityreason.com/securityalert/3485 http://www.vupen.com/english/advisories/2008/0013 XForce ISS Database: apache-juli-logging-weak-security(39201) https://exchange.xforce.ibmcloud.com/vulnerabilities/39201 Common Vulnerability Exposure (CVE) ID: CVE-2007-5461 BugTraq ID: 26070 http://www.securityfocus.com/bid/26070 Debian Security Information: DSA-1453 (Google Search) http://www.debian.org/security/2008/dsa-1453 https://www.exploit-db.com/exploits/4530 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html http://marc.info/?l=full-disclosure&m=119239530508382 http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 http://issues.apache.org/jira/browse/GERONIMO-3549 http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705@apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9202 http://www.redhat.com/support/errata/RHSA-2008-0261.html RedHat Security Advisories: RHSA-2008:0630 http://rhn.redhat.com/errata/RHSA-2008-0630.html http://www.securitytracker.com/id?1018864 http://secunia.com/advisories/27398 http://secunia.com/advisories/27446 http://secunia.com/advisories/27481 http://secunia.com/advisories/27727 http://secunia.com/advisories/28361 http://secunia.com/advisories/29242 http://secunia.com/advisories/30899 http://secunia.com/advisories/30908 http://secunia.com/advisories/31493 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 SuSE Security Announcement: SUSE-SR:2008:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html http://www.vupen.com/english/advisories/2007/3622 http://www.vupen.com/english/advisories/2007/3671 http://www.vupen.com/english/advisories/2007/3674 http://www.vupen.com/english/advisories/2008/1979/references XForce ISS Database: apache-tomcat-webdav-dir-traversal(37243) https://exchange.xforce.ibmcloud.com/vulnerabilities/37243 Common Vulnerability Exposure (CVE) ID: CVE-2008-2712 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html BugTraq ID: 29715 http://www.securityfocus.com/bid/29715 Bugtraq: 20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1 (Google Search) http://www.securityfocus.com/archive/1/493352/100/0/threaded Bugtraq: 20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1 (Google Search) http://www.securityfocus.com/archive/1/493353/100/0/threaded http://marc.info/?l=bugtraq&m=121494431426308&w=2 Bugtraq: 20080811 rPSA-2008-0247-1 gvim vim vim-minimal (Google Search) http://www.securityfocus.com/archive/1/495319/100/0/threaded Bugtraq: 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (Google Search) http://www.securityfocus.com/archive/1/502322/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 http://www.rdancer.org/vulnerablevim.html http://www.openwall.com/lists/oss-security/2008/06/16/2 http://www.openwall.com/lists/oss-security/2008/10/15/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238 http://www.redhat.com/support/errata/RHSA-2008-0580.html http://www.redhat.com/support/errata/RHSA-2008-0617.html http://www.redhat.com/support/errata/RHSA-2008-0618.html http://www.securitytracker.com/id?1020293 http://secunia.com/advisories/30731 http://secunia.com/advisories/32858 http://secunia.com/advisories/32864 http://secunia.com/advisories/33410 http://securityreason.com/securityalert/3951 http://www.ubuntu.com/usn/USN-712-1 http://www.vupen.com/english/advisories/2008/1851/references http://www.vupen.com/english/advisories/2009/0033 http://www.vupen.com/english/advisories/2009/0904 XForce ISS Database: vim-scripts-command-execution(43083) https://exchange.xforce.ibmcloud.com/vulnerabilities/43083 Common Vulnerability Exposure (CVE) ID: CVE-2008-4101 BugTraq ID: 30795 http://www.securityfocus.com/bid/30795 Bugtraq: 20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g] (Google Search) http://www.securityfocus.com/archive/1/495662 Bugtraq: 20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g] (Google Search) http://www.securityfocus.com/archive/1/495703 http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2 http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2 http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e http://www.rdancer.org/vulnerablevim-K.html http://www.openwall.com/lists/oss-security/2008/09/11/4 http://www.openwall.com/lists/oss-security/2008/09/11/3 http://www.openwall.com/lists/oss-security/2008/09/16/5 http://www.openwall.com/lists/oss-security/2008/09/16/6 http://ftp.vim.org/pub/vim/patches/7.2/7.2.010 http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812 http://secunia.com/advisories/31592 XForce ISS Database: vim-normal-command-execution(44626) https://exchange.xforce.ibmcloud.com/vulnerabilities/44626 Common Vulnerability Exposure (CVE) ID: CVE-2008-3432 BugTraq ID: 30648 http://www.securityfocus.com/bid/30648 http://www.openwall.com/lists/oss-security/2008/07/15/4 http://www.openwall.com/lists/oss-security/2008/08/01/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987 XForce ISS Database: vim-mchexpandwildcards-bo(44722) https://exchange.xforce.ibmcloud.com/vulnerabilities/44722 Common Vulnerability Exposure (CVE) ID: CVE-2008-3294 Bugtraq: 20080717 Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution (Google Search) http://www.securityfocus.com/archive/1/494532/100/0/threaded Bugtraq: 20080718 Re: Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution (Google Search) http://www.securityfocus.com/archive/1/494535/100/0/threaded Bugtraq: 20080725 Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution (Google Search) http://www.securityfocus.com/archive/1/494736/100/0/threaded http://seclists.org/fulldisclosure/2008/Jul/0312.html http://secunia.com/advisories/31159 http://www.vupen.com/english/advisories/2008/2146/references Common Vulnerability Exposure (CVE) ID: CVE-2008-4215 BugTraq ID: 31718 http://www.securityfocus.com/bid/31718 http://www.securitytracker.com/id?1021030 XForce ISS Database: macosx-weblog-weak-security(45787) https://exchange.xforce.ibmcloud.com/vulnerabilities/45787
Copyright	Copyright (C) 2010 LSS

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.