Details of VAR-201603-0209

ID

VAR-201603-0209

CVE

CVE-2016-1787

TITLE

Apple OS X Server of Wiki On the server Wiki Vulnerability that can retrieve important information from the page

Trust: 0.8

sources: JVNDB: JVNDB-2016-001875

DESCRIPTION

Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. Apple Mac OS X Server is prone to the following security vulnerabilities: 1. Multiple security-bypass vulnerabilities 2. Multiple information-disclosure vulnerabilities An attacker can leverage these issues to obtain sensitive information, bypass security restrictions and perform unauthorized actions. The software enables file sharing, meeting scheduling, website hosting, network remote access, and more. Wiki Server is one of the web-based services that provides functions such as wikis, blogs, calendars, and contacts. An attacker could exploit this vulnerability to disclose sensitive user information with elevated privileges. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2016-03-21-7 OS X Server 5.1 OS X Server 5.1 is now available and addresses the following: Server App Available for: OS X Yosemite v10.10.5 and later Impact: An administrator may unknowingly store backups on a volume without permissions enabled Description: An issue in Time Machine server did not properly warn administrators if permissions were ignored when performing a server backup. This issue was addressed through improved warnings. CVE-ID CVE-2016-1774 : CJKApps Web Server Available for: OS X Yosemite v10.10.5 and later Impact: An attacker may be able to exploit weaknesses in the RC4 cryptographic algorithm Description: RC4 was removed as a supported cipher. CVE-ID CVE-2016-1777 : Pepi Zawodsky Web Server Available for: OS X Yosemite v10.10.5 and later Impact: A remote user may be able to view sensitive configuration information Description: A file access issue existed in Apache with .DS_Store and .htaccess files. This issue was addressed through improved access restrictions. This issue was addressed through improved access restrictions. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJW8JQQAAoJEBcWfLTuOo7txasP/RcVgQ2t03szn0LLt0PSFjD9 PZg339iTYRk7sCHyNYwEnBeqdyDuO3005d4yaZ2R2OAI8Q806DJSpcTMG8Nu3sm3 xXceiVb/k+sRzh0nJaSHSVkw2GRzElsm5i6b3yFndeVnXF9eDphrjTeV2MFvoTRl t2Ml6IiTu944yJlh/NOmdjQZ+Uc2I+REDbUimeCMJVuuVmtd9UNS5VesC5u1BHyb bDmrd+pazmEjGwWwvxTE4raN7o/st7ZV2uxcjl8/73b/lVy9wBR/J4sxltyWNnm8 PJKbn/J5t8+tqKHupVvOuj4L6GnsOe154oL7bbOmrAhkVBeqBSdUBe9eQNIH0ji3 YwUdyDb3Wy1SyVNvN69tTd+ICTyh7XQQWMUTqV3xgp6tNJ19FXPdv9K/E55n62kw alfIzLhRafLV7NzUbAgsY8iuC6b3YTd9EJM0mDuh8hlTWYRC7N8HEtyxe4hAhfuO wMy1sRXWAiTBIZRJKL8KgAiIf7GdyKOvhgfcoL3dEGe5lw2Z9DCHyRihMOWFo2/Q LsJTxV9grMWN4WJLAm0h9z6AVbIELpRp4HBiq95ndaWm7bZbj6tFCRXvQaMerPut kuXD3izfEVZvtCSs7i4HKPgZLRgFRd687yVYeTSx2nyhOIeKd+tTfmUjMEw06PaT 9p0+e+mVlJlCmWiFIwsu =nxck -----END PGP SIGNATURE-----

Trust: 2.07

sources: NVD: CVE-2016-1787 // JVNDB: JVNDB-2016-001875 // BID: 85054 // VULHUB: VHN-90606 // PACKETSTORM: 136348

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x server	scope:	lte	version:	5.0.15	Trust: 1.0
vendor:	apple	model:	macos server	scope:	lt	version:	5.1 (os x yosemite v10.10.5 or later )	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	5.0.15	Trust: 0.6
vendor:	apple	model:	watchos	scope:	eq	version:	4.3.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.3.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.0	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	1.0	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.6	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.5	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.1.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.1.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.0	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.4	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10	Trust: 0.3
vendor:	apple	model:	macos	scope:	eq	version:	10.12.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x5.0.15	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x5.0.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.1.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.1.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.1.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.10.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	50	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	40	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	30	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.9	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.8	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.7	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.10	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	2.0	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10	Trust: 0.3
vendor:	apple	model:	watchos	scope:	ne	version:	5	Trust: 0.3
vendor:	apple	model:	tvos	scope:	ne	version:	12	Trust: 0.3
vendor:	apple	model:	macos	scope:	ne	version:	10.12.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	ne	version:	x5.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	ne	version:	12	Trust: 0.3

sources: BID: 85054 // JVNDB: JVNDB-2016-001875 // CNNVD: CNNVD-201603-313 // NVD: CVE-2016-1787

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-1787
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2016-1787
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201603-313
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-90606
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-1787
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-90606
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-1787
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.0

sources: VULHUB: VHN-90606 // JVNDB: JVNDB-2016-001875 // CNNVD: CNNVD-201603-313 // NVD: CVE-2016-1787

PROBLEMTYPE DATA

problemtype:

CWE-200

Trust: 1.9

sources: VULHUB: VHN-90606 // JVNDB: JVNDB-2016-001875 // NVD: CVE-2016-1787

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201603-313

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201603-313

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-001875

PATCH

title:	Apple security updates	url:	https://support.apple.com/en-us/HT201222	Trust: 0.8
title:	APPLE-SA-2016-03-21-7 OS X Server 5.1	url:	http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html	Trust: 0.8
title:	HT206173	url:	https://support.apple.com/en-us/HT206173	Trust: 0.8
title:	HT206173	url:	https://support.apple.com/ja-jp/HT206173	Trust: 0.8
title:	Apple OS X Server Wiki Server Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=60639	Trust: 0.6

sources: JVNDB: JVNDB-2016-001875 // CNNVD: CNNVD-201603-313

EXTERNAL IDS

db:	NVD	id:	CVE-2016-1787	Trust: 2.9
db:	BID	id:	85054	Trust: 1.4
db:	SECTRACK	id:	1035342	Trust: 1.1
db:	JVN	id:	JVNVU97668313	Trust: 0.8
db:	JVNDB	id:	JVNDB-2016-001875	Trust: 0.8
db:	CNNVD	id:	CNNVD-201603-313	Trust: 0.7
db:	SECUNIA	id:	69050	Trust: 0.6
db:	VULHUB	id:	VHN-90606	Trust: 0.1
db:	PACKETSTORM	id:	136348	Trust: 0.1

sources: VULHUB: VHN-90606 // BID: 85054 // JVNDB: JVNDB-2016-001875 // PACKETSTORM: 136348 // CNNVD: CNNVD-201603-313 // NVD: CVE-2016-1787

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2016/mar/msg00006.html	Trust: 1.7
url:	https://support.apple.com/ht206173	Trust: 1.7
url:	http://www.securityfocus.com/bid/85054	Trust: 1.1
url:	http://www.securitytracker.com/id/1035342	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1787	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu97668313/index.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1787	Trust: 0.8
url:	http://secunia.com/advisories/69050	Trust: 0.6
url:	https://www.apple.com/osx/	Trust: 0.3
url:	http://www.apple.com/server/macosx/	Trust: 0.3
url:	https://support.apple.com/en-us/ht209106	Trust: 0.3
url:	https://support.apple.com/en-us/ht209107	Trust: 0.3
url:	https://support.apple.com/en-us/ht209108	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1776	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1774	Trust: 0.1
url:	https://support.apple.com/kb/ht201222	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1787	Trust: 0.1
url:	https://www.apple.com/support/security/pgp/	Trust: 0.1
url:	https://gpgtools.org	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1777	Trust: 0.1

sources: VULHUB: VHN-90606 // BID: 85054 // JVNDB: JVNDB-2016-001875 // PACKETSTORM: 136348 // CNNVD: CNNVD-201603-313 // NVD: CVE-2016-1787

CREDITS

CJKApps, Pepi Zawodsky, Shawn Pullum of University of California, Irvine and an anonymous researcher

Trust: 0.3

sources: BID: 85054

SOURCES

db:	VULHUB	id:	VHN-90606
db:	BID	id:	85054
db:	JVNDB	id:	JVNDB-2016-001875
db:	PACKETSTORM	id:	136348
db:	CNNVD	id:	CNNVD-201603-313
db:	NVD	id:	CVE-2016-1787

LAST UPDATE DATE

2025-04-13T20:19:13.352000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-90606	date:	2016-12-20T00:00:00
db:	BID	id:	85054	date:	2018-09-25T04:00:00
db:	JVNDB	id:	JVNDB-2016-001875	date:	2016-03-28T00:00:00
db:	CNNVD	id:	CNNVD-201603-313	date:	2016-03-23T00:00:00
db:	NVD	id:	CVE-2016-1787	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-90606	date:	2016-03-24T00:00:00
db:	BID	id:	85054	date:	2016-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2016-001875	date:	2016-03-28T00:00:00
db:	PACKETSTORM	id:	136348	date:	2016-03-22T15:23:11
db:	CNNVD	id:	CNNVD-201603-313	date:	2016-03-23T00:00:00
db:	NVD	id:	CVE-2016-1787	date:	2016-03-24T01:59:54.267