Directory traversal

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share...

Code injection

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1830

CVE-2010-1830 concerns AFP Server in Apple Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. An error-handling difference depending on whether a share exists enables remote attackers to enumerate valid share names via unspecified vectors. The issue is addressed by Apple in Security Update 2010-007 (Mac...

CVE-2010-1828

The CVE-2010-1828 entry affects AFP Server in Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. Root cause: a NULL pointer dereference in AFP Server’s handling of reconnect authentication packets, leading to remote denial of service and daemon restart. Public detail confirms the impact as a crash/resta...

CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1803

Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume...

CVE-2010-1803

Technical details about CVE-2010-1803 are not publicly provided in the supplied connected documents. Please monitor vendor advisories and security trackers for updates.

CVE-2010-1829

CVE-2010-1829 affects AFP Server on Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a directory traversal flaw allows an authenticated remote user to create files outside a share, potentially enabling arbitrary code execution. Apple patched via improved path validation in Security Update 2010-007, speci...

CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1803: Undefined Security Weakness

Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume...

CVE-2010-1828: Improper Input Validation

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1830: Undefined Security Weakness

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

PT-2010-3436

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue allows remote attackers to obtain sensitive information by spoofing a remote AFP volume. This is due to the Time Machine feature not verifying the unique identifier of its...

CVE-2010-1829: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share...

PT-2010-3457

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description A directory traversal issue in the AFP Server allows remote authenticated users to execute arbitrary code by creating files outside the bounds of a share. Recommendations For Apple Mac ...

PT-2010-3458

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description The issue allows remote attackers to enumerate valid share names due to different error messages generated by the AFP Server, depending on whether a share exists. Recommendations For...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

Mac OS X Multiple Vulnerabilities (Security Update 2010-007)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. This security update contains fixes for the following products : - AFP Server - Apache modperl - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services - diskdevcmds - Disk...

Mac OS X AFP Server绕过口令验证漏洞

BUGTRAQ ID: 43341 CVECAN ID: CVE-2010-1820 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的AFP Server服务器中存在绕过口令验证漏洞，用户只需知道目标机器上的账号就可以访问AFP共享的文件夹。 Apple Mac OS X 10.6.4 Apple MacOS X Server 10.6.4 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/support/downloads/...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...