Details of VAR-201603-0236

ID

VAR-201603-0236

CVE

CVE-2016-1776

TITLE

Apple OS X Server of Web Vulnerability in server where important setting information is obtained

Trust: 0.8

sources: JVNDB: JVNDB-2016-001873

DESCRIPTION

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request. Supplementary information : CWE Vulnerability type by CWE-284: Improper Access Control ( Inappropriate access control ) Has been identified. http://cwe.mitre.org/data/definitions/284.htmlBy a third party HTTP Important setting information may be obtained through a request. Apple Mac OS X Server is prone to the following security vulnerabilities: 1. Multiple security-bypass vulnerabilities 2. Multiple information-disclosure vulnerabilities An attacker can leverage these issues to obtain sensitive information, bypass security restrictions and perform unauthorized actions. The software enables file sharing, meeting scheduling, website hosting, network remote access, and more. Web Server is one of the Web servers. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2016-03-21-7 OS X Server 5.1 OS X Server 5.1 is now available and addresses the following: Server App Available for: OS X Yosemite v10.10.5 and later Impact: An administrator may unknowingly store backups on a volume without permissions enabled Description: An issue in Time Machine server did not properly warn administrators if permissions were ignored when performing a server backup. This issue was addressed through improved warnings. CVE-ID CVE-2016-1774 : CJKApps Web Server Available for: OS X Yosemite v10.10.5 and later Impact: An attacker may be able to exploit weaknesses in the RC4 cryptographic algorithm Description: RC4 was removed as a supported cipher. This issue was addressed through improved access restrictions. CVE-ID CVE-2016-1776 : Shawn Pullum of University of California, Irvine Wiki Server Available for: OS X Yosemite v10.10.5 and later Impact: An attacker in a privileged network position may be able to leak sensitive user information Description: An access issue existed in some Wiki pages. This issue was addressed through improved access restrictions. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJW8JQQAAoJEBcWfLTuOo7txasP/RcVgQ2t03szn0LLt0PSFjD9 PZg339iTYRk7sCHyNYwEnBeqdyDuO3005d4yaZ2R2OAI8Q806DJSpcTMG8Nu3sm3 xXceiVb/k+sRzh0nJaSHSVkw2GRzElsm5i6b3yFndeVnXF9eDphrjTeV2MFvoTRl t2Ml6IiTu944yJlh/NOmdjQZ+Uc2I+REDbUimeCMJVuuVmtd9UNS5VesC5u1BHyb bDmrd+pazmEjGwWwvxTE4raN7o/st7ZV2uxcjl8/73b/lVy9wBR/J4sxltyWNnm8 PJKbn/J5t8+tqKHupVvOuj4L6GnsOe154oL7bbOmrAhkVBeqBSdUBe9eQNIH0ji3 YwUdyDb3Wy1SyVNvN69tTd+ICTyh7XQQWMUTqV3xgp6tNJ19FXPdv9K/E55n62kw alfIzLhRafLV7NzUbAgsY8iuC6b3YTd9EJM0mDuh8hlTWYRC7N8HEtyxe4hAhfuO wMy1sRXWAiTBIZRJKL8KgAiIf7GdyKOvhgfcoL3dEGe5lw2Z9DCHyRihMOWFo2/Q LsJTxV9grMWN4WJLAm0h9z6AVbIELpRp4HBiq95ndaWm7bZbj6tFCRXvQaMerPut kuXD3izfEVZvtCSs7i4HKPgZLRgFRd687yVYeTSx2nyhOIeKd+tTfmUjMEw06PaT 9p0+e+mVlJlCmWiFIwsu =nxck -----END PGP SIGNATURE-----

Trust: 2.07

sources: NVD: CVE-2016-1776 // JVNDB: JVNDB-2016-001873 // BID: 85054 // VULHUB: VHN-90595 // PACKETSTORM: 136348

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x server	scope:	lte	version:	5.0.15	Trust: 1.0
vendor:	apple	model:	macos server	scope:	lt	version:	5.1 (os x yosemite v10.10.5 or later )	Trust: 0.8
vendor:	apple	model:	mac os x server	scope:	eq	version:	5.0.15	Trust: 0.6
vendor:	apple	model:	watchos	scope:	eq	version:	4.3.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.3.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	4	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	3	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.2	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.1	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	2.0	Trust: 0.3
vendor:	apple	model:	watchos	scope:	eq	version:	1.0	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.6	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.5	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.1.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.1.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	9.0	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.4	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	11	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.2	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10.1	Trust: 0.3
vendor:	apple	model:	tvos	scope:	eq	version:	10	Trust: 0.3
vendor:	apple	model:	macos	scope:	eq	version:	10.12.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x5.0.15	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x5.0.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.1.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.1.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.5	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.3	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.2.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.1.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.1	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x4.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x3.0	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	eq	version:	x2.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.10.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	50	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	40	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	30	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	9	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	8	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7.0.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	7	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.1.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5.0.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.9	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.8	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.7	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2.10	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	2.0	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.4	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.6	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.5	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	11	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.3	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.2	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	eq	version:	10	Trust: 0.3
vendor:	apple	model:	watchos	scope:	ne	version:	5	Trust: 0.3
vendor:	apple	model:	tvos	scope:	ne	version:	12	Trust: 0.3
vendor:	apple	model:	macos	scope:	ne	version:	10.12.2	Trust: 0.3
vendor:	apple	model:	mac os server	scope:	ne	version:	x5.1	Trust: 0.3
vendor:	apple	model:	ios	scope:	ne	version:	12	Trust: 0.3

sources: BID: 85054 // JVNDB: JVNDB-2016-001873 // CNNVD: CNNVD-201603-312 // NVD: CVE-2016-1776

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-1776
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2016-1776
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201603-312
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-90595
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-1776
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-90595
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-1776
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.0

sources: VULHUB: VHN-90595 // JVNDB: JVNDB-2016-001873 // CNNVD: CNNVD-201603-312 // NVD: CVE-2016-1776

PROBLEMTYPE DATA

problemtype:	CWE-284	Trust: 1.1
problemtype:	CWE-Other	Trust: 0.8

sources: VULHUB: VHN-90595 // JVNDB: JVNDB-2016-001873 // NVD: CVE-2016-1776

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201603-312

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201603-312

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-001873

PATCH

title:	Apple security updates	url:	https://support.apple.com/en-us/HT201222	Trust: 0.8
title:	APPLE-SA-2016-03-21-7 OS X Server 5.1	url:	http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html	Trust: 0.8
title:	HT206173	url:	https://support.apple.com/en-us/HT206173	Trust: 0.8
title:	HT206173	url:	https://support.apple.com/ja-jp/HT206173	Trust: 0.8
title:	Apple OS X Server Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=60638	Trust: 0.6

sources: JVNDB: JVNDB-2016-001873 // CNNVD: CNNVD-201603-312

EXTERNAL IDS

db:	NVD	id:	CVE-2016-1776	Trust: 2.9
db:	BID	id:	85054	Trust: 1.4
db:	SECTRACK	id:	1035342	Trust: 1.1
db:	JVN	id:	JVNVU97668313	Trust: 0.8
db:	JVNDB	id:	JVNDB-2016-001873	Trust: 0.8
db:	CNNVD	id:	CNNVD-201603-312	Trust: 0.7
db:	SECUNIA	id:	69050	Trust: 0.6
db:	VULHUB	id:	VHN-90595	Trust: 0.1
db:	PACKETSTORM	id:	136348	Trust: 0.1

sources: VULHUB: VHN-90595 // BID: 85054 // JVNDB: JVNDB-2016-001873 // PACKETSTORM: 136348 // CNNVD: CNNVD-201603-312 // NVD: CVE-2016-1776

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2016/mar/msg00006.html	Trust: 1.7
url:	https://support.apple.com/ht206173	Trust: 1.7
url:	http://www.securityfocus.com/bid/85054	Trust: 1.1
url:	http://www.securitytracker.com/id/1035342	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1776	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu97668313/index.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1776	Trust: 0.8
url:	http://secunia.com/advisories/69050	Trust: 0.6
url:	https://www.apple.com/osx/	Trust: 0.3
url:	http://www.apple.com/server/macosx/	Trust: 0.3
url:	https://support.apple.com/en-us/ht209106	Trust: 0.3
url:	https://support.apple.com/en-us/ht209107	Trust: 0.3
url:	https://support.apple.com/en-us/ht209108	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1776	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1774	Trust: 0.1
url:	https://support.apple.com/kb/ht201222	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1787	Trust: 0.1
url:	https://www.apple.com/support/security/pgp/	Trust: 0.1
url:	https://gpgtools.org	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1777	Trust: 0.1

sources: VULHUB: VHN-90595 // BID: 85054 // JVNDB: JVNDB-2016-001873 // PACKETSTORM: 136348 // CNNVD: CNNVD-201603-312 // NVD: CVE-2016-1776

CREDITS

CJKApps, Pepi Zawodsky, Shawn Pullum of University of California, Irvine and an anonymous researcher

Trust: 0.3

sources: BID: 85054

SOURCES

db:	VULHUB	id:	VHN-90595
db:	BID	id:	85054
db:	JVNDB	id:	JVNDB-2016-001873
db:	PACKETSTORM	id:	136348
db:	CNNVD	id:	CNNVD-201603-312
db:	NVD	id:	CVE-2016-1776

LAST UPDATE DATE

2025-04-13T22:04:38.039000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-90595	date:	2016-12-20T00:00:00
db:	BID	id:	85054	date:	2018-09-25T04:00:00
db:	JVNDB	id:	JVNDB-2016-001873	date:	2016-03-28T00:00:00
db:	CNNVD	id:	CNNVD-201603-312	date:	2016-03-23T00:00:00
db:	NVD	id:	CVE-2016-1776	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-90595	date:	2016-03-24T00:00:00
db:	BID	id:	85054	date:	2016-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2016-001873	date:	2016-03-28T00:00:00
db:	PACKETSTORM	id:	136348	date:	2016-03-22T15:23:11
db:	CNNVD	id:	CNNVD-201603-312	date:	2016-03-23T00:00:00
db:	NVD	id:	CVE-2016-1776	date:	2016-03-24T01:59:43.780