Vulnerabilities > CVE-2004-0927 - Multiple Security vulnerability in Apple Mac OS X

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
easy-software-products
apple
nessus
NVD
Published: 2005-01-27
Updated: 2008-09-05

Summary

ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.

Vulnerable Configurations

Part Description Count
Application
Easy_Software_Products
21
OS
Apple
30

Nessus

NASL familyMacOS X Local Security Checks
NASL idMACOSX_SECUPD20040930.NASL
descriptionThe remote host is missing Security Update 2004-09-30. This security update contains a number of fixes for the following programs : - AFP Server - CUPS - NetInfoManager - postfix - QuickTime - ServerAdmin These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.
last seen2020-06-01
modified2020-06-02
plugin id15420
published2004-10-04
reporterThis script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/15420
titleMac OS X Multiple Vulnerabilities (Security Update 2004-09-30)

References