Test Kennung:	1.3.6.1.4.1.25623.1.0.800543
Kategorie:	Denial of Service
Titel:	Apple iTunes Multiple Vulnerabilities
Zusammenfassung:	Apple iTunes is prone to multiple vulnerabilities.
Beschreibung:	Summary: Apple iTunes is prone to multiple vulnerabilities. Vulnerability Insight: The following issues exist: - the origin of an authentication request is not properly informed to the user - an error is generated while processing a Digital Audio Access Protocol (DAAP) message containing specially crafted Content-Length parameter in the header of a DAAP message Vulnerability Impact: This issue may be exploited to gain the user's iTune credentials when subscribing to a malicious podcast and to cause denial of service. Affected Software/OS: Apple iTunes version prior to 8.1.0.51 on Windows. Solution: Update to version 8.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0016 http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html BugTraq ID: 34094 http://www.securityfocus.com/bid/34094 Bugtraq: 20090313 Apple iTunes DAAP Messages Handling Denial of Service Vulnerability (Google Search) http://www.securityfocus.com/archive/1/501758/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html http://www.fortiguardcenter.com/advisory/FGA-2009-11.html http://osvdb.org/52578 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001 http://securitytracker.com/id?1021842 http://secunia.com/advisories/34254 http://www.vupen.com/english/advisories/2009/0702 XForce ISS Database: itunes-daap-dos(49200) https://exchange.xforce.ibmcloud.com/vulnerabilities/49200 Common Vulnerability Exposure (CVE) ID: CVE-2009-0143 http://osvdb.org/52579 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336 http://securitytracker.com/id?1021843 XForce ISS Database: itunes-podcast-information-disclosure(49201) https://exchange.xforce.ibmcloud.com/vulnerabilities/49201
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.