137 matches found
Race condition
Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...
CVE-2009-0142
Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service infinite loop via unspecified vectors related to "file enumeration logic."...
CVE-2009-0142
CVE-2009-0142 describes a race condition in the AFP Server of Apple Mac OS X 10.5.6 that can cause a denial of service (infinite loop) through unspecified vectors related to the file enumeration logic. The provided connected documents confirm the affected component and the nature of the impact, b...
Code injection
Apple Filing Protocol AFP Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic...
CVE-2008-1027
Apple Filing Protocol AFP Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic...
CVE-2008-1027
CVE-2008-1027 is tied to Apple File Protocol (AFP) on Mac OS X prior to 10.5.3, where AFP Server did not verify that requested files/directories were inside shared folders. This allowed remote attackers to read arbitrary files via unspecified AFP traffic. The issue is documented in the 2008-003 s...
Apple Mac OS X 2008-003更新修复多个安全漏洞
BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...
AFP Server Detection
Binary data 4437.prm...
AFP Server Detection
Binary data 4438.prm...
Cross site scripting
Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...
CVE-2008-0045
Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...
CVE-2008-0045
Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...
CVE-2008-0045
CVE-2008-0045 affects Apple Mac OS X 10.4.11: the AFP Server’s handling of Kerberos principal realm names contains an error that could allow remote attackers to bypass cross-realm authentication and establish unauthorized connections. The issue is documented among multiple vulnerabilities address...
Apple Mac OS X AFP server may disclose file and folder information in search results
Overview A vulnerability in the Apple Mac OS X AFP server may disclose file and folder items to unauthorized users. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files stored on a server. When file sharing is enabled, Apple's Mac OS X AFP server...
Apple Mac OS X多个安全漏洞
Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞,具体如下: CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话,就可能导致信息泄露;如果权限允许的话,攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞,导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上,AFP...
Apple Mac OS X AFP server vulnerable to DoS via maliciously crafted AFP request
Overview A vulnerability in the Apple Mac OS X AFP server may allow an attacker to cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to access files remotely from a server. Apple's Mac OS X AFP server contains ...
Apple Mac OS X AFP server stores reconnect keys in a world-readable file
Overview A vulnerability in Apple Mac OS X AFP server may allow an authenticated local user to access files or folders with the credentials of another user. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. In Apple's Mac OS X...
Code injection
Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...
Integer overflow
Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...
CVE-2006-3496
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service crash via an invalid AFP request that triggers an unchecked error condition...