Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

/ xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int fd, zlen; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/...

CVE-2008-3613

Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving a search for a remote disk on the local network...

Apple Mac OS X 2008-002更新修复多个安全漏洞

BUGTRAQ ID: 28304 CVECAN ID:...

CVE-2008-0992

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...

CVE-2008-0992

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...

CVE-2008-0047

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions...

CVE-2008-0989

Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname...

Heap overflow

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions...

CVE-2008-1000

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 aka Leopard allows remote authenticated users to write arbitrary files via ".." sequences in file attachments...

CVE-2008-0994

CVE-2008-0994 affects Apple Mac OS X 10.5.2 Preview: when saving a PDF with encryption, the implementation uses 40-bit RC4, making brute-force decryption feasible. The underlying issue is the weak 40‑bit RC4 encryption used for PDFs saved by Preview, which can compromise confidentiality of the pr...

CVE-2008-1000

CVE-2008-1000 is a path traversal vulnerability in Mac OS X Server 10.5.2 (Leopard) Wiki Server. The issue resides in ContentServer.py and allows remote authenticated users to write arbitrary files by manipulating file attachments (.. sequences). Affected product: Wiki Server on Mac OS X Server 1...

CVE-2008-0992

CVE-2008-0992 affects Apple Mac OS X 10.5.2 and is caused by an array index error in pax when processing an archive with a crafted length value, enabling context-dependent attackers to execute arbitrary code. Covered products in the sources include Mac OS X 10.5.2; no explicit remediation version...

CVE-2008-0989

CVE-2008-0989 describes a format-string vulnerability in Apple’s mDNSResponderHelper on Mac OS X 10.5.2. Local attackers can trigger arbitrary code execution or a denial of service by providing a specially crafted local hostname. The vulnerability is confirmed in multiple feeds (NVD entry lists a...

CVE-2008-0996

The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials...

Design/Logic Flaw

The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might...