Apple iTunes Multiple Vulnerabilities

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

CVE-2009-0143

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...

Authentication flaw

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...

CVE-2009-0143

Apple iTunes

CVE-2009-0143

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...

Apple iTunes信息泄露和拒绝服务漏洞

BUGTRAQ ID: 34094 CVECAN ID: CVE-2009-0016,CVE-2009-0143 Apple iTunes是一款媒体播放程序。 iTunes在处理数字音频访问协议（DAAP）消息时存在死循环，如果远程攻击者在发送的消息的DAAP头中包含了特制的Content-Length参数的话就会导致播放器崩溃。 iTunes的podcast功能中存在设计错误，订阅到恶意的podcast可能会向用户显示认证对话框，该对话框可诱骗用户向podcast服务器发送iTunes凭据。 Apple iTunes 8.0 厂商补丁： Apple -----...

Apple patches iTunes password-stealing hole

Apple has issued an advisory to warn that malicious hackers can rig audio files to hijack usernames and passwords from its popular iTunes media player. The company described the bug as a “design issue” in the iTunes podcast feature can be abused via rigged audio files to cause an authentication...

Apple iTunes < 8.1 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.1. It is, therefore, affected by multiple vulnerabilities : - A remote attacker can cause a denial of service by sending a maliciously crafted DAAP message. Note that this vulnerability only affects iTunes running on a Windows...

Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...

Sql injection

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230

CVE-2008-6230 affects the Pre Projects Pre Podcast Portal (Tour.php). The vulnerability is an SQL injection via the id parameter that enables remote attackers to execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (NETWORK, LOW attack complexity, NONE authentication, PARTIAL impacts ...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4223

Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors...

Authentication flaw

Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors...

CVE-2008-4223

CVE-2008-4223 affects Podcast Producer on Mac OS X Server v10.5 (before 10.5.6). Root cause: authentication bypass in the Podcast Producer server allows remote attackers to access administrative functions. Impact: unauthorized admin access. Remediation: apply Mac OS X 10.5.6 Update / Security Upd...

CVE-2008-4223

Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors...

Apple Mac OS X multiple security vulnerabilities

Apple Type Services DoS, BOM buffer overflow with CPIO archives, CoreGraphics buffer overflow on images parsing, invalid cookies setting for geographical domains, dangerous content warning bypass, multiple Flash Player Plugin vulnerabilities, multiple privilege escalations, Internet Sharing DoS,...

Mac OS X 10.5.x < 10.5.6 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.6. Mac OS X 10.5.6 contains security fixes for the following products : - ATS - BOM - CoreGraphics - CoreServices - CoreTypes - Flash Player Plug-in - Kernel - Libsystem - Managed Client - networkcmds - Podcast Producer...

Pre Podcast Portal (Tour.php id) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PRE...