Test ID:	1.3.6.1.4.1.25623.1.0.102029
Category:	Mac OS X Local Security Checks
Title:	Mac OS X 10.5.2 Update / Mac OS X Security Update 2008-001
Summary:	The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001.
Description:	Summary: The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001. Affected Software/OS: One or more of the following components are affected: Directory Services Foundation Launch Services Mail NFS Open Directory Parental Controls Samba Terminal X11 Solution: Update your Mac OS X operating system. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0355 http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html BugTraq ID: 22101 http://www.securityfocus.com/bid/22101 Cert/CC Advisory: TA08-043B http://www.us-cert.gov/cas/techalerts/TA08-043B.html https://www.exploit-db.com/exploits/3151 http://projects.info-pull.com/moab/MOAB-17-01-2007.html http://www.osvdb.org/32693 http://securitytracker.com/id?1017533 http://securitytracker.com/id?1019359 http://secunia.com/advisories/23796 http://www.vupen.com/english/advisories/2007/0239 XForce ISS Database: macos-slpd-bo(31562) https://exchange.xforce.ibmcloud.com/vulnerabilities/31562 Common Vulnerability Exposure (CVE) ID: CVE-2008-0035 http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html BugTraq ID: 27296 http://www.securityfocus.com/bid/27296 http://www.securitytracker.com/id?1019220 http://secunia.com/advisories/28497 http://secunia.com/advisories/28891 http://www.vupen.com/english/advisories/2008/0147 http://www.vupen.com/english/advisories/2008/0495/references XForce ISS Database: iphone-ipod-foundation-code-execution(39700) https://exchange.xforce.ibmcloud.com/vulnerabilities/39700 Common Vulnerability Exposure (CVE) ID: CVE-2008-0038 BugTraq ID: 27736 http://www.securityfocus.com/bid/27736 http://www.securitytracker.com/id?1019360 Common Vulnerability Exposure (CVE) ID: CVE-2008-0039 http://www.securitytracker.com/id?1019361 Common Vulnerability Exposure (CVE) ID: CVE-2008-0040 http://www.securitytracker.com/id?1019362 Common Vulnerability Exposure (CVE) ID: CVE-2008-0041 http://www.securitytracker.com/id?1019363 Common Vulnerability Exposure (CVE) ID: CVE-2007-6015 BugTraq ID: 26791 http://www.securityfocus.com/bid/26791 Bugtraq: 20071210 Secunia Research: Samba "send_mailslot()" Buffer OverflowVulnerability (Google Search) http://www.securityfocus.com/archive/1/484818/100/0/threaded Bugtraq: 20071210 [SECURITY] Buffer overrun in send_mailslot() (Google Search) http://www.securityfocus.com/archive/1/484825/100/0/threaded Bugtraq: 20071210 rPSA-2007-0261-1 samba samba-swat (Google Search) http://www.securityfocus.com/archive/1/484827/100/0/threaded Bugtraq: 20071214 POC for samba send_mailslot() (Google Search) http://www.securityfocus.com/archive/1/485144/100/0/threaded Bugtraq: 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (Google Search) http://www.securityfocus.com/archive/1/488457/100/0/threaded CERT/CC vulnerability note: VU#438395 http://www.kb.cert.org/vuls/id/438395 Debian Security Information: DSA-1427 (Google Search) http://www.debian.org/security/2007/dsa-1427 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html http://security.gentoo.org/glsa/glsa-200712-10.xml HPdes Security Advisory: HPSBUX02316 http://marc.info/?l=bugtraq&m=120524782005154&w=2 HPdes Security Advisory: HPSBUX02341 http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 HPdes Security Advisory: SSRT071495 HPdes Security Advisory: SSRT080075 http://www.mandriva.com/security/advisories?name=MDKSA-2007:244 http://secunia.com/secunia_research/2007-99/advisory/ http://lists.vmware.com/pipermail/security-announce/2008/000005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605 http://www.redhat.com/support/errata/RHSA-2007-1114.html http://www.redhat.com/support/errata/RHSA-2007-1117.html http://www.securitytracker.com/id?1019065 http://secunia.com/advisories/27760 http://secunia.com/advisories/27894 http://secunia.com/advisories/27977 http://secunia.com/advisories/27993 http://secunia.com/advisories/27999 http://secunia.com/advisories/28003 http://secunia.com/advisories/28028 http://secunia.com/advisories/28029 http://secunia.com/advisories/28037 http://secunia.com/advisories/28067 http://secunia.com/advisories/28089 http://secunia.com/advisories/29032 http://secunia.com/advisories/29341 http://secunia.com/advisories/30484 http://secunia.com/advisories/30835 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554 http://securityreason.com/securityalert/3438 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1 SuSE Security Announcement: SUSE-SA:2007:068 (Google Search) http://www.novell.com/linux/security/advisories/2007_68_samba.html http://www.ubuntu.com/usn/usn-556-1 http://www.vupen.com/english/advisories/2007/4153 http://www.vupen.com/english/advisories/2008/0637 http://www.vupen.com/english/advisories/2008/0859/references http://www.vupen.com/english/advisories/2008/1712/references http://www.vupen.com/english/advisories/2008/1908 XForce ISS Database: samba-sendmailslot-bo(38965) https://exchange.xforce.ibmcloud.com/vulnerabilities/38965 Common Vulnerability Exposure (CVE) ID: CVE-2008-0042 CERT/CC vulnerability note: VU#774345 http://www.kb.cert.org/vuls/id/774345 http://www.securitytracker.com/id?1019364 Common Vulnerability Exposure (CVE) ID: CVE-2007-4568 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 25898 http://www.securityfocus.com/bid/25898 Bugtraq: 20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/481432/100/0/threaded Debian Security Information: DSA-1385 (Google Search) http://www.debian.org/security/2007/dsa-1385 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html http://security.gentoo.org/glsa/glsa-200710-11.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602 http://www.mandriva.com/security/advisories?name=MDKSA-2007:210 http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10882 http://www.redhat.com/support/errata/RHSA-2008-0029.html http://www.redhat.com/support/errata/RHSA-2008-0030.html http://www.securitytracker.com/id?1018763 http://secunia.com/advisories/27040 http://secunia.com/advisories/27052 http://secunia.com/advisories/27060 http://secunia.com/advisories/27168 http://secunia.com/advisories/27176 http://secunia.com/advisories/27228 http://secunia.com/advisories/27240 http://secunia.com/advisories/27560 http://secunia.com/advisories/28004 http://secunia.com/advisories/28536 http://secunia.com/advisories/28542 http://secunia.com/advisories/29420 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1 SuSE Security Announcement: SUSE-SA:2007:054 (Google Search) http://www.novell.com/linux/security/advisories/2007_54_xorg.html http://www.vupen.com/english/advisories/2007/3337 http://www.vupen.com/english/advisories/2007/3338 http://www.vupen.com/english/advisories/2007/3467 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: xfs-protocol-requests-bo(36919) https://exchange.xforce.ibmcloud.com/vulnerabilities/36919 Common Vulnerability Exposure (CVE) ID: CVE-2008-0037 http://www.securitytracker.com/id?1019365
Copyright	Copyright (C) 2010 LSS

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.