Apple Xcode < 4.4 Multiple Vulnerabilities (Mac OS X)

NASLDB: Apple Xcode < 4.4 Multiple Vulnerabilities (Mac OS X)

General

ID: 61413
Name: Apple Xcode < 4.4 Multiple Vulnerabilities (Mac OS X)

Summary: Checks version of Xcode

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 0
Family: MacOS X Local Security Checks
Type: Local

Description

The remote Mac OS X host has Apple Xcode prior to 4.4 installed. It
therefore is reportedly affected by multiple vulnerabilities :

– Known attacks on the SSL 3.0 and TLS 1.0 protocol when a
cipher suite uses a block cipher in CBC mode could be
exploited to decrypt protected data. The neon library
disables the ‘empty fragment’ countermeasure that
prevented these attacks. This issue is addressed by
enabling the countermeasure. (CVE-2011-3389)

– An information disclosure vulnerability exists that may
allow a specially crafted App Store application to read
entries in the keychain. (CVE-2012-3698)