APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 OS X Yosemite v10.10.4 and Security Update 2015-005 are now available and address the following: Admin Framework Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to...

Apple MAC OS X AFP Server Memory Corruption Vulnerability

Apple Mac OS X is a commercial operating system. A memory corruption vulnerability exists in the Apple Mac OS X AFP server, which allows remote attackers to exploit the vulnerability by submitting a special request to crash an application or execute arbitrary code...

APPLE-SA-2015-01-27-4 OS X 10.10.2 and Security Update 2015-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-01-27-4 OS X 10.10.2 and Security Update 2015-001 OS X 10.10.2 and Security Update 2015-001 are now available and address the following: AFP Server Available for: OS X Mavericks v10.9.5 Impact: A remote attacker may be able to determine...

Mac OS X Multiple Vulnerabilities (Security Update 2015-001) (POODLE)

The remote host is running a version of Mac OS X 10.8 or 10.9 that does not have Security Update 2015-001 applied. This update contains several security-related fixes for the following components : - AFP Server - Bluetooth - CoreGraphics - CoreSymbolication - FontParser - Foundation - Intel...

Apple Mac OS X 10.3.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...

Apple Mac OS X and QuickTime multiple security vulnerabilities

Multiple vulnerabilities in kernel, networking components, printing services, AFP Server, AppKit, Apple Type Services, CFNetwork, CoreGraphics, CoreText, Directory Services, diskdevcmds, Disk Images, Image Capture, ImageIO, Image RAW, Password Server, QuickLook, QuickTime, Safari RSS, Time Machin...

Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)

This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 OpenVAS Vulnerability Test $Id: gbmacosxsu10-007.nasl 7052 2017-09-04 11:50:51Z teissa $ Mac OS X v10.6.4 Multiple Vulnerabilities 2010-007 Authors: Madhuri D Copyright: Copyrig...

About the security content of Mac OS X v10.6.5 and Security Update 2010-007

About the security content of Mac OS X v10.6.5 and Security Update 2010-007 Last Modified: November 12, 2010 Article: HT4435 Email this article Print this page Summary This document describes the security content of Mac OS X v10.6.5 and Security Update 2010-007, which can be downloaded and...

CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1829

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share...

Code injection

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

Directory traversal

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share...

Null pointer dereference

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1830

CVE-2010-1830 concerns AFP Server in Apple Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. An error-handling difference depending on whether a share exists enables remote attackers to enumerate valid share names via unspecified vectors. The issue is addressed by Apple in Security Update 2010-007 (Mac...

CVE-2010-1829

CVE-2010-1829 affects AFP Server on Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a directory traversal flaw allows an authenticated remote user to create files outside a share, potentially enabling arbitrary code execution. Apple patched via improved path validation in Security Update 2010-007, speci...

CVE-2010-1828

The CVE-2010-1828 entry affects AFP Server in Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. Root cause: a NULL pointer dereference in AFP Server’s handling of reconnect authentication packets, leading to remote denial of service and daemon restart. Public detail confirms the impact as a crash/resta...

PT-2010-3457

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description A directory traversal issue in the AFP Server allows remote authenticated users to execute arbitrary code by creating files outside the bounds of a share. Recommendations For Apple Mac ...

PT-2010-3458

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description The issue allows remote attackers to enumerate valid share names due to different error messages generated by the AFP Server, depending on whether a share exists. Recommendations For...