远程主机正在运行的 Mac OS X 10.6 或 10.7 版本未应用安全更新 2013-004。此更新包含针对以下组件的安全相关补丁：

- Apache
 - Bind
 - Certificate Trust Policy
 - ClamAV
 - Installer
 - IPSec
 - Mobile Device Management
 - OpenSSL
 - PHP
 - PostgreSQL
 - QuickTime
 - sudo

请注意，如果成功利用最严重的问题则可能导致执行任意代码。

根据其标题，远程主机上的 ClamAV clamd 防病毒后台程序低于 0.97.8，因此可能受到以下漏洞的影响：

- 处理 SIS 内容时，“libclamav/sis.c”的“getsisstring()”函数中存在一处溢出情况。
 据报告，此缺陷仅影响 GNU/Linux。
 （问题 6808）

- 处理特别构建的加密 PDF 文件时，“libclamav/pdf.c”中存在一处堆溢出。据报告，此缺陷仅影响 ClamAV 0.97.1 - 0.97.7。
 （问题 7053）

- “libclamav/pe.c”中存在一处当处理特别构建的 UPX 打包的可执行文件时触发的堆溢出。（问题 7055）

Versions of ClamAV earlier than 0.97.8 are potentially affected by the following vulnerabilities : 

 - An overflow condition in 'libclamav/pdf.c' may be triggered as user-supplied input is not properly validated when handling a specially crafted encrypted PDF file. This may allow a context-dependent attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2013-2021)

 - An overflow condition in 'libclamav/pe.c' may be triggered as user-supplied input is not properly validated when handling a specially crafted UPX-packed executable file. This may allow a context-dependent attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2013-2020)

ID	名稱	產品	系列	已發布	已更新	嚴重性
69878	Mac OS X 多种漏洞（安全更新 2013-004）	Nessus	MacOS X Local Security Checks	2013/9/13	2024/5/28	critical
66308	ClamAV < 0.97.8 多种漏洞	Nessus	Misc.	2013/5/3	2019/11/27	medium
6782	ClamAV < 0.97.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/5/2	2019/3/6	medium

偵測

搜尋 Plugin

critical

medium

medium