Vulnerabilities > CVE-2005-1342 - Multiple vulnerability in Apple Mac OS X
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| OS | 10 |
Nessus
| NASL family | MacOS X Local Security Checks |
| NASL id | MACOSX_SECUPD2005-005.NASL |
| description | The remote host is missing Security Update 2005-005. This security update contains fixes for the following applications : - Apache - AppKit - AppleScript - Bluetooth - Directory Services - Finder - Foundation - HelpViewer - LDAP - libXpm - lukemftpd - NetInfo - ServerAdmin - sudo - Terminal - VPN These programs have multiple vulnerabilities that could allow a remote attacker to execute arbitrary code. |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 18189 |
| published | 2005-05-03 |
| reporter | This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. |
| source | https://www.tenable.com/plugins/nessus/18189 |
| title | Mac OS X Multiple Vulnerabilities (Security Update 2005-005) |
References
- http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
- http://remahl.se/david/vuln/011/
- http://secunia.com/advisories/15227
- http://www.kb.cert.org/vuls/id/356070
- http://www.osvdb.org/16084
- http://www.securityfocus.com/bid/13480
- http://www.us-cert.gov/cas/techalerts/TA05-136A.html
- http://www.vupen.com/english/advisories/2005/0455