CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

CVE-2010-0057

CVE-2010-0057 : AFP Server in macOS before 10.6.3 fails to prevent guest access to AFP shares when guest access is disabled, allowing a remote user to mount AFP shares as a guest and bypass access restrictions. Affected: Mac OS X v10.5.8/v10.6 through v10.6.2 (and corresponding Server variants). ...

CVE-2010-0057

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

CVE-2010-0533

CVE-2010-0533 is a directory-traversal vulnerability in Apple Mac OS X AFP Server prior to 10.6.3. It allows remote attackers to list a share root’s parent directory and read/modify files there via unspecified vectors. Affected: AFP Server on Mac OS X before 10.6.3. Impact: partial confidentialit...

AFP Server Share Enumeration (guest)

The remote AFP server allows guest users to connect to several shares. Make sure this is in line with your organization's security policy. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45380; scriptversion "$Revision: 1.3 $"; scriptnameenglish:"AFP Server Share...

CVE-2010-0057: Undefined Security Weakness

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

Mac OS X < 10.6.3 Multiple Vulnerabilities

Binary data 5489.prm...

CVE-2010-0533: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

afp-brute NSE Script

Performs password guessing against Apple Filing Protocol AFP. Script Arguments afp.password, afp.username See the documentation for the afp library. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. Example Usage nmap -p 548 --scrip...

afp-path-vuln NSE Script

Detects the Mac OS X AFP directory traversal vulnerability, CVE-2010-0533. This script attempts to iterate over all AFP shares on the remote host. For each share it attempts to access the parent directory by exploiting the directory traversal vulnerability as described in CVE-2010-0533. The scrip...

AFP Server Directory Traversal

The remote AFP server allows guest users to read files located outside public shares by sending requests to the '..' directory. An attacker could use this flaw to read every file on this host. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45374; scriptversion "1.11...

Mac OS X Multiple Vulnerabilities (Security Update 2010-002)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied. This security update contains fixes for the following products : - AppKit - Application Firewall - AFP Server - Apache - ClamAV - CoreTypes - CUPS - curl - Cyrus IMAP - Cyrus SASL - Disk...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...

afp-showmount NSE Script

Shows AFP shares and ACLs. Script Arguments afp.password, afp.username See the documentation for the afp library. Example Usage nmap -sV --script=afp-showmount Script Output PORT STATE SERVICE 548/tcp open afp | afp-showmount: | Yoda's Public Folder | Owner: Search,Read,Write | Group: Search,Read...

Null pointer dereference

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service NULL pointer dereference, memory consumption, ABEND, and crash via a large number of malformed or AFP requests that are not properly handled by 1 the CIFS functionality in CIFS.nlm Semantic Agent Build 163 MP 3.27 or 2 th...

CVE-2010-0317

The CVE-2010-0317 issue affects Novell Netware 6.5 SP8. It describes a remote denial-of-service via a flood of malformed AFP/CIFS requests that are not properly handled by CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or AFPTCP.nlm Build 163 SP 3.27. The underlying fault is a NULL pointer dereferen...

CVE-2010-0317: Undefined Security Weakness

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service NULL pointer dereference, memory consumption, ABEND, and crash via a large number of malformed or AFP requests that are not properly handled by 1 the CIFS functionality in CIFS.nlm Semantic Agent Build 163 MP 3.27 or 2 th...

Novell Netware DoS

Resources exhaustion via AFP and CIFS protocols...

{PRL} Novell Netware CIFS And AFP Remote Memory Consumption DoS

Application: Novell Netware CIFS And AFP Remote Memory Consumption DoS Platforms: Novell Netware 6.5 SP8 Crash: YES Exploitation: Remote DoS Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://protekresearch.blogspot.com/ 1...