CVE-2010-0057

CVE-2010-0057 : AFP Server in macOS before 10.6.3 fails to prevent guest access to AFP shares when guest access is disabled, allowing a remote user to mount AFP shares as a guest and bypass access restrictions. Affected: Mac OS X v10.5.8/v10.6 through v10.6.2 (and corresponding Server variants). ...

CVE-2010-0057

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

CVE-2010-0533

CVE-2010-0533 is a directory-traversal vulnerability in Apple Mac OS X AFP Server prior to 10.6.3. It allows remote attackers to list a share root’s parent directory and read/modify files there via unspecified vectors. Affected: AFP Server on Mac OS X before 10.6.3. Impact: partial confidentialit...

AFP Server Share Enumeration (guest)

The remote AFP server allows guest users to connect to several shares. Make sure this is in line with your organization's security policy. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45380; scriptversion "$Revision: 1.3 $"; scriptnameenglish:"AFP Server Share...

CVE-2010-0057: Undefined Security Weakness

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

Mac OS X < 10.6.3 Multiple Vulnerabilities

Binary data 5489.prm...

CVE-2010-0533: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

AFP Server Directory Traversal

The remote AFP server allows guest users to read files located outside public shares by sending requests to the '..' directory. An attacker could use this flaw to read every file on this host. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45374; scriptversion "1.11...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...

Mac OS X Multiple Vulnerabilities (Security Update 2010-002)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied. This security update contains fixes for the following products : - AppKit - Application Firewall - AFP Server - Apache - ClamAV - CoreTypes - CUPS - curl - Cyrus IMAP - Cyrus SASL - Disk...

Mac OS X Multiple Vulnerabilities (Security Update 2009-001)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied. This security update contains fixes for the following products : - AFP Server - Apple Pixlet Video - CarbonCore - CFNetwork - Certificate Assistant - ClamAV - CoreText - CUPS - DS...

CVE-2009-0142

Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...

Race condition

Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...

CVE-2009-0142

CVE-2009-0142 describes a race condition in the AFP Server of Apple Mac OS X 10.5.6 that can cause a denial of service (infinite loop) through unspecified vectors related to the file enumeration logic. The provided connected documents confirm the affected component and the nature of the impact, b...

CVE-2009-0142

Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...

CVE-2009-0142: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...

Code injection

Apple Filing Protocol AFP Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic...

CVE-2008-1027

CVE-2008-1027 is tied to Apple File Protocol (AFP) on Mac OS X prior to 10.5.3, where AFP Server did not verify that requested files/directories were inside shared folders. This allowed remote attackers to read arbitrary files via unspecified AFP traffic. The issue is documented in the 2008-003 s...

CVE-2008-1027

Apple Filing Protocol AFP Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic...

CVE-2008-1027: Undefined Security Weakness

Apple Filing Protocol AFP Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic...