281 matches found
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
CVE-2005-2714
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.PID temporary file...
[ Suresec Advisories ] - Mac OS X (xnu) multiple information leaks
Suresec security advisory 8 3th November 2005 CVE ID: CVE-2005-1126, CVE-2005-2752 Mac OS X kernel xnu multiple information leaks. Vulnerability summary: The first information leak found in xnu is located in the ifconf function used to retrieve information about all used network interfaces. The...
CVE-2005-2751
CVE-2005-2751 affects Mac OS X 10.4.x (up to 10.4.2) and Mac OS X Server 10.4.2. The issue is delayed synchronization of group membership changes in memberd, allowing an authenticated user to access files/resources after removal from a group. Appleās advisory for 10.4.3 fixes includes invalidatin...
CVE-2005-3143
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...
CVE-2005-3143
CVE-2005-3143 affects the Mailbox Server for 4D WebStar prior to 5.3.5. It allows denial-of-service (crash) via IMAP clients on Mac OS X Mail 2. The NVD/Nessus entries document the issue; no exploitation details are provided in the connected documents, and no remediation details are stated here.
CVE-2005-3143
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...
Fedora Core 4 : php-5.0.4-10.4 (2005-810)
This update includes the latest upstream version of the PEAR XMLRPC package, which fixes a security issue in request parsing in the XMLRPC Server code. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-2498 to this issue. Note that Tenable Network...
[Full-disclosure] DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse'
DMA2005-0818a - 'Apple OSX dsidentity privilege abuse' Author: Kevin Finisterre Vendor: http://www.apple.com/bluetooth/ Product: 'Mac OSX 10.4' References: http://www.digitalmunition.com/DMA2005-0818a.txt http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2508...
CVE-2005-2510
The Server Admin tool in servermgripfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended ...
[Full-disclosure] Apple Mac Tiger 10.4 weblog server
------------------------------------------------------------ - EXPL-A-2005-010 exploitlabs.com Advisory 039 - ------------------------------------------------------------ - Mac OSX Server weblog - AFFECTED PRODUCTS ================= Mac OSX 10.4.0 Weblog Server http://apple.com OVERVIEW ========...
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1: insecure world- and group-writable permissions were set for the system cache folder and Dashboard widgets, enabling local users to perform unauthorized file operations via file race conditions. Affected: Mac OS X 10.4.x (up to 10.4.1). Root cause: incorrect per...
Apple Mac OSX 10.4 - launchd Race Condition
Apple Mac OSX 10.4 - launchd Race Condition / Mac OS X 10.4 launchd race condition exploit intropy intropy caughq.org / / .sh script to help with the offsets /str0ke !/bin/bash X=1000 Y=3000 I=1 while 1 do ./CAU-launchd /etc/passwd $X if $I -lt 30 then X=$X+$Y I=$I+1 else X=1000 I=1 fi done /...
CVE-2005-1933
CVE-2005-1933 affects Apple Mac OS X Tiger (10.4) Dashboard. It arises when a user widget uses the same CFBundleIdentifier as a system widget, causing Dashboard to override the legitimate widget and potentially let the attacker execute arbitrary commands. The impact is user-level code execution v...
CVE-2005-1728
MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...
CVE-2005-1579
Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition .qtz file that uses certain patches to read local information, then other patches to send the information to the attacker...
CVE-2005-1505
The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...
CVE-2005-1505
The CVE describes a vulnerability in Mail.app 2.0 on Mac OS X 10.4 during IMAP account configuration: the new account wizard does not prompt for SSL until after the password is sent, allowing plaintext leakage. Affected component is the IMAP credential flow in Mail.app 2.0; root cause is delayed ...
CVE-2005-1505
The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...