CVE-2005-1342

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...

CVE-2005-1331

The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters su...

CVE-2005-1333

CVE-2005-1333 describes a Directory traversal vulnerability in the Bluetooth OBEX services of Mac OS X 10.3.9, allowing remote attackers to read arbitrary files. The issue affects Bluetooth file/OBEX handling and arises from improper path handling. In practice, exploitation would enable unauthori...

CVE-2005-1331

The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters su...

CVE-2005-1339

lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name...

CVE-2005-1342

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...

CVE-2005-1333

Directory traversal vulnerability in the Bluetooth file and object exchange OBEX services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files...

CVE-2005-1330

CVE-2005-1330 affects Apple Mac OS X 10.3.9 AppKit: processing malformed TIFF images can cause NXSeek to offset incorrectly, leading to an unhandled exception and a denial-of-service (Cocoa application crash). The CERT/NVD entries describe the impact as an unauthenticated remote-triggered DoS via...

CVE-2005-1332

CVE-2005-1332 pertains to Mac OS X 10.3.9, where Bluetooth is enabled by default and the Bluetooth file exchange service may be active without user notification. This allows remote attackers to access files and local users to access files via the default transfer directory. Apple addressed the is...

CVE-2005-1331

CVE-2005-1331 concerns the AppleScript Editor in Mac OS X 10.3.9, where AppleScript: URI handling fails to display the intended code, potentially allowing a remote attacker to persuade the user to run malicious code via URI characters like NULL or control characters. The connected sources corrobo...