The remote host is running Apple Mac OS X, but lacks Security Update 2005-009.

This security update contains fixes for the following applications :

- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications :
- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog 

The remote host appears to be running a version of Apache, an open source web server.  This version of Apache is vulnerable to a flaw in the way that it handles malformed HTTP requests.  An attacker exploiting this flaw would be able to possibly corrupt cache memory or inject HTML requests to a vulnerable Apache server.  The vulnerability stems from a non-conformance to RFC 2616 that states that HTTP requests must not include both a 'Content-Length' and 'Transfer-Encoding' field.   

The remote host appears to be running a version of Apache, an open source web server.  This version of Apache is vulnerable to a flaw in the way that it handles mod_ssl CRL verification callback.  In order for an attacker to exploit this flaw the attacker would need to find a server that was configured to use a malicious certificate revocation list (CRL). 

ID	名稱	產品	系列	已發布	已更新	嚴重性
20249	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus	MacOS X Local Security Checks	2005/11/30	2024/5/28	high
3308	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus Network Monitor	Operating System Detection	2005/11/30	2019/3/6	high
3042	Apache HTTP Request Parsing HTML Injection	Nessus Network Monitor	Web Servers	2005/6/30	2019/3/6	high
3112	Apache < 2.0.55 HTTP Smuggling Vulnerability	Nessus Network Monitor	Web Servers	2005/7/25	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high