35 matches found
PT-2011-4461
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5.0.1 Description The issue allows remote attackers to obtain sensitive information via a crafted DNS hostname, due to the libinfo component not properly formulating domain-name queries. Recommendations For Apple iO...
CVE-2011-3441: Exposure of Sensitive Information to an Unauthorized Actor
libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname...
Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)
This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...
CVE-2011-0183
Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service lockd, statd, mountd, or portmap outage via a crafted packet, related to an "integer truncation issue."...
PT-2011-2164
Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue is related to an integer truncation problem in the handling of an unspecified integer field in an NFS RPC packet by Libinfo in Mac OS X. This can be exploited by remote attackers to cause...
CVE-2011-0183: Undefined Security Weakness
Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service lockd, statd, mountd, or portmap outage via a crafted packet, related to an "integer truncation issue."...
Mac OS X Multiple Vulnerabilities (Security Update 2011-001)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-001 applied. This security update contains fixes for the following products : - Apache - bzip2 - ClamAV - ImageIO - Kerberos - Libinfo - libxml - Mailman - PHP - QuickLook - Ruby - X11 C Tenable Network...
Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities
Binary data 800796.prm...
Design/Logic Flaw
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly...
CVE-2007-0735
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly...
CVE-2007-0735
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly...
CVE-2007-0735
CVE-2007-0735 describes a use-after-free vulnerability in Apple Mac OS X Libinfo (affecting OS X 10.3.9–10.4.9). The flaw allows remote attackers to crash the application or potentially execute arbitrary code through crafted web pages that trigger error conditions and access deallocated memory. T...
CVE-2007-0736
CVE-2007-0736 describes an integer overflow in the Libinfo RPC library on Apple Mac OS X 10.3.9–10.4.9. The underlying issue in the RPC portmap handling allows remote attackers to execute arbitrary code. Documents consistently cite this as a remote code execution via crafted requests to portmap, ...
CVE-2007-0735: Undefined Security Weakness
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly...
CVE-2007-0736: Undefined Security Weakness
Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap...