Mac OS X 10.10.x < 10.10.4 多种漏洞 (GHOST) (Logjam)
critical Nessus 插件 ID 84488
语言：
简介
远程主机缺少一个用于修复多种安全漏洞的 Mac OS X 更新。描述
远程主机运行的 Mac OS X 10.10.x 版本低于 10.10.4。因此，它受到以下组件中多种漏洞的影响：- Admin Framework
- afpserver
- apache
- AppleFSCompression
- AppleGraphicsControl
- AppleThunderboltEDMService
- ATS
- Bluetooth
- Certificate Trust Policy
- CFNetwork HTTPAuthentication
- CoreText
- coreTLS
- DiskImages
- Display Drivers
- EFI
- FontParser
- Graphics Driver
- ImageIO
- Install Framework Legacy
- Intel Graphics Driver
- IOAcceleratorFamily
- IOFireWireFamily
- Kernel
- kext tools
- ntfs
- ntp
- OpenSSL
- QuickTime
- Security
- Spotlight
- SQLite
- System Stats
- TrueTypeScaler
- zip
请注意，如果成功利用最严重的问题则可能导致执行任意代码。
解决方案
升级到 Mac OS X 10.10.4 或更高版本。另见
https://support.apple.com/en-ca/HT204942
插件详情
严重性: Critical
ID: 84488
文件名: macosx_10_10_4.nasl
版本: 1.22
类型: combined
代理: macosx
发布时间: 2015/7/1
最近更新时间: 2022/12/5
支持的传感器: Nessus Agent, Nessus
风险信息
VPR
风险因素: Critical
分数: 9.8
CVSS v2
风险因素: Critical
基本分数: 10
时间分数: 8.7
矢量: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 分数来源: CVE-2015-0235
漏洞信息
CPE: cpe:/o:apple:mac_os_x
可利用: true
易利用性: Exploits are available
补丁发布日期: 2015/6/30
漏洞发布日期: 2015/6/30
可利用的方式
CANVAS (CANVAS)
Core Impact
Metasploit (Apple OS X Entitlements Rootpipe Privilege Escalation)
参考资料信息
CVE: CVE-2015-0209, CVE-2015-0235, CVE-2015-0273, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293, CVE-2015-1157, CVE-2015-1798, CVE-2015-1799, CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, CVE-2015-3667, CVE-2015-3668, CVE-2015-3671, CVE-2015-3672, CVE-2015-3673, CVE-2015-3674, CVE-2015-3675, CVE-2015-3676, CVE-2015-3677, CVE-2015-3678, CVE-2015-3679, CVE-2015-3680, CVE-2015-3681, CVE-2015-3682, CVE-2015-3683, CVE-2015-3684, CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, CVE-2015-3689, CVE-2015-3690, CVE-2015-3691, CVE-2015-3692, CVE-2015-3693, CVE-2015-3694, CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, CVE-2015-3702, CVE-2015-3703, CVE-2015-3704, CVE-2015-3705, CVE-2015-3706, CVE-2015-3707, CVE-2015-3708, CVE-2015-3709, CVE-2015-3710, CVE-2015-3711, CVE-2015-3712, CVE-2015-3713, CVE-2015-3714, CVE-2015-3715, CVE-2015-3716, CVE-2015-3717, CVE-2015-3718, CVE-2015-3719, CVE-2015-3720, CVE-2015-3721, CVE-2015-4000, CVE-2015-7036
BID: 72325, 72701, 73225, 73227, 73231, 73232, 73237, 73239, 73950, 73951, 74733
APPLE-SA: APPLE-SA-2015-06-30-2
CERT: 967332