CVE-2006-1440

BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links...

[SA20077] Mac OS X Security Update Fixes Multiple Vulnerabilities

TITLE: Mac OS X Security Update Fixes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA20077 VERIFY ADVISORY: http://secunia.com/advisories/20077/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of sensitive information, DoS, System access WHERE: From remote OPERATING SYSTEM: Apple...

CVE-2006-1985

CVE-2006-1985: Heap-based buffer overflow in BOM BOMArchiveHelper (Mac OS X 10.4.6 and earlier) allows user-assisted arbitrary-code execution via crafted archives with long path names, triggering BOMStackPop. Documented impact and vulnerable component are described; no remediation details are pro...

CVE-2006-1985: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 6.3 Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive such as ZIP that contains long path names, which triggers an error in the BOMStackPop function...

Directory traversal

Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper...

CVE-2006-0391

Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper...

CVE-2006-0391

CVE-2006-0391 is a directory traversal vulnerability in Apple Mac OS X’s BOM framework (BOMArchiveHelper) that affects 10.x before 10.3.9 and 10.4 before 10.4.5. The issue allows a user-assisted attacker to overwrite or create arbitrary files via an archive processed by BOMArchiveHelper. The conf...

CVE-2006-0391: Undefined Security Weakness

Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...