CVE-2005-0340: Undefined Security Weakness

Integer signedness error in Apple File Service AFP Server allows remote attackers to cause a denial of service application crash via a negative UAM string length in a FPLoginExt packet...

Apple Mac OSX - AppleFileServer Remote Denial of Service

/ fm-afp.c - nemo @ felinemenace.org - 2005 Code for afp bug found by Braden Thomas. Again hello to everyone @ irc.pulltheplug.org need a challenge? - http://pulltheplug.org - / include include include include include define UAMSIZE 1022 define AFPVERSIZE 5 define PATHSIZE 30 define UASIZE 30...

CVE-2004-0922

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box...

CVE-2004-0921

AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets...

CVE-2004-0922

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box...

CVE-2004-0921

CVE-2004-0921 affects AFP Server on Mac OS X 10.3.x–10.3.5. When a guest has an AFP volume mounted, they can terminate authenticated user mounts via modified SessionDestroy packets, enabling partial impact to confidentiality, integrity, and availability. Connected sources corroborate the affected...

CVE-2004-0922

CVE-2004-0922 (Mac OS X AFP Server) affects AFP Server on Mac OS X 10.3.x through 10.3.5. The underlying issue is that the guest group ID is not properly set, which causes a write-only AFP Drop Box on a guest-mounted share to become read-write, allowing a guest to read the Drop Box. The connected...

CVE-2004-0921

AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets...

CVE-2004-0922: Undefined Security Weakness

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box...

CVE-2004-0921: Undefined Security Weakness

AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets...

Mac OS X Multiple Vulnerabilities (Security Update 2004-09-30)

The remote host is missing Security Update 2004-09-30. This security update contains a number of fixes for the following programs : - AFP Server - CUPS - NetInfoManager - postfix - QuickTime - ServerAdmin These programs have multiple vulnerabilities which may allow a remote attacker to execute...

Mac OS X Multiple Vulnerabilities (Security Update 2003-12-19)

The remote host is missing Security Update 2003-12-19. This security update includes the following components : - AFP Server - cd9600.util - Directory Services - fetchmail - fsusage - rsync - System Initialization For MacOS X 10.3, it also includes : - ASN.1 Decoding for PKI This update contains...

AppleFileServer LoginExt PathName Overflow

This module exploits a stack buffer overflow in the AppleFileServer service on MacOS X. This vulnerability was originally reported by Atstake and was actually one of the few useful advisories ever published by that company. You only have one chance to exploit this bug. This particular exploit use...

Multiple Mac OS X AFP client bugs

Cryptographic weakness allows interception of users credential via connection proxying...

CVE-2003-0379

CVE-2003-0379 concerns Apple File Service (AFP Server) on Mac OS X Server. When sharing files on a UFS or re‑shared NFS volume, remote attackers could overwrite arbitrary files. The description and public records (NVD) indicate a remote, unauthenticated access vector with low attack complexity, r...

CVE-2003-0379: Undefined Security Weakness

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

CVE-2003-0049

CVE-2003-0049 involves AFP in Mac OS X before 10.2.4. The flaw allows an administrator to log in as another user by authenticating with the administrator password. The impact is elevated access to other user accounts as described in the public records. Remediation is to apply the Apple fix in Mac...

Apple Filing Protocol Server Detection

The remote service understands the Apple Filing Protocol AFP and responds to a 'FPGetSrvrInfo' 'DSIGetStatus' request with information about itself. AFP is used to offer file services for Mac OS X as well as the older Mac OS. In the past, it has also been known as 'AppleTalk Filing Protocol' and...