Vulnerabilities > CVE-2005-1474 - Unspecified vulnerability in Apple mac OS X and mac OS X Server
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 3 |
Nessus
NASL family MacOS X Local Security Checks NASL id MACOSX_10_4_1.NASL description The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.1. Mac OS X 10.4.1 contains several security fixes for : - Bluetooth - Dashboard - Kernel - SecurityAgent last seen 2020-06-01 modified 2020-06-02 plugin id 18353 published 2005-05-20 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/18353 title Mac OS X 10.4.x < 10.4.1 Multiple Vulnerabilities code # # (C) Tenable Network Security, Inc. # if ( ! defined_func("bn_random") ) exit(0); include("compat.inc"); if(description) { script_id(18353); script_version ("1.19"); script_cve_id("CVE-2005-1472", "CVE-2005-1473", "CVE-2005-1474"); script_bugtraq_id(13694, 13695, 13696); script_name(english:"Mac OS X 10.4.x < 10.4.1 Multiple Vulnerabilities"); script_set_attribute(attribute:"synopsis", value: "The remote host is missing a Mac OS X update that fixes various security issues." ); script_set_attribute(attribute:"description", value: "The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.1. Mac OS X 10.4.1 contains several security fixes for : - Bluetooth - Dashboard - Kernel - SecurityAgent" ); # http://web.archive.org/web/20090106074817/http://support.apple.com/kb/TA23244?viewlocale=en_US script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e2ed7e60" ); script_set_attribute(attribute:"solution", value: "Upgrade to Mac OS X 10.4.1." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_publication_date", value: "2005/05/20"); script_set_attribute(attribute:"vuln_publication_date", value: "2005/05/09"); script_set_attribute(attribute:"patch_publication_date", value: "2005/05/19"); script_cvs_date("Date: 2018/07/14 1:59:35"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x"); script_end_attributes(); script_summary(english:"Check for the version of Mac OS X"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc."); script_family(english:"MacOS X Local Security Checks"); script_dependencies("ssh_get_info.nasl", "mdns.nasl"); #script_require_keys("Host/MacOSX/packages"); exit(0); } os = get_kb_item("Host/MacOSX/Version"); if ( ! os ) os = get_kb_item("mDNS/os"); if ( ! os ) exit(0); if ( ereg(pattern:"Mac OS X 10\.4$", string:os )) security_warning(0);
NASL family MacOS X Local Security Checks NASL id MACOSX_10_4_2.NASL description The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.2. Mac OS X 10.4.2 contains several security fixes for : - TCP/IP - Dashboard - Bluetooth File and Object Exchange last seen 2020-06-01 modified 2020-06-02 plugin id 18683 published 2005-07-12 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/18683 title Mac OS X 10.4.x < 10.4.2 Multiple Vulnerabilities code # # (C) Tenable Network Security, Inc. # if ( ! defined_func("bn_random") ) exit(0); include("compat.inc"); if(description) { script_id(18683); script_version ("1.22"); script_cve_id("CVE-2005-1333", "CVE-2005-1474", "CVE-2005-2194"); script_bugtraq_id(14241); script_name(english:"Mac OS X 10.4.x < 10.4.2 Multiple Vulnerabilities"); script_set_attribute(attribute:"synopsis", value: "The remote host may be affected by multiple vulnerabilities." ); script_set_attribute(attribute:"description", value: "The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.2. Mac OS X 10.4.2 contains several security fixes for : - TCP/IP - Dashboard - Bluetooth File and Object Exchange" ); # http://web.archive.org/web/20060419231505/http://docs.info.apple.com/article.html?artnum=301948 script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?35ecc934" ); script_set_attribute(attribute:"solution", value: "Apply the Mac OS X 10.4.2 Update." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_publication_date", value: "2005/07/12"); script_set_attribute(attribute:"vuln_publication_date", value: "2005/05/03"); script_set_attribute(attribute:"patch_publication_date", value: "2005/07/11"); script_cvs_date("Date: 2018/07/14 1:59:35"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x"); script_end_attributes(); script_summary(english:"Check the version of Mac OS X"); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc."); script_family(english:"MacOS X Local Security Checks"); script_dependencies("ssh_get_info.nasl", "mdns.nasl"); #script_require_keys("Host/MacOSX/packages"); exit(0); } os = get_kb_item("Host/MacOSX/Version"); if ( ! os ) os = get_kb_item("mDNS/os"); if ( ! os ) exit(0); if ( ereg(pattern:"Mac OS X 10\.4($|\.1([^0-9]|$))", string:os )) security_warning(0);