Lucene search
+L

86 matches found

OpenVAS
OpenVAS
added 2013/02/01 12:00 a.m.42 views

Apple Mac OS X Predefined Sandbox Profiles Security Bypass Vulnerability

The host is installed with Apple Mac OS X operating system and is prone to sandbox profiles security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmacosxsandboxprofilessecbypassvuln.nasl 6521 2017-07-04 14:51:10Z cfischer $ Apple Mac OS X Predefined Sandbox Profiles Security Bypass...

7.6CVSS9.1AI score0.03537EPSS
SaveExploits12References3
Prion
Prion
added 2011/11/15 6:55 p.m.35 views

Design/Logic Flaw

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...

7.6CVSS6.5AI score0.03537EPSS
SaveExploits12References2Affected Software1
Prion
Prion
added 2011/11/15 6:55 p.m.34 views

Design/Logic Flaw

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

7.6CVSS8.7AI score0.03537EPSS
SaveExploits12References2Affected Software1
CVE
CVE
added 2011/11/15 6:00 p.m.65 views

CVE-2011-1516

Technical details about CVE-2011-1516 are not publicly available in the provided connected documents. The supplied materials discuss related SAP NetWeaver vulnerabilities and do not furnish Apple Mac OS X sandbox profile specifics, impacts, or fixes.

7.6CVSS8.5AI score0.03533EPSS
SaveExploits11References2Affected Software1
Cvelist
Cvelist
added 2011/11/15 6:00 p.m.48 views

CVE-2008-7303

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

8.8AI score0.03537EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2011/11/15 6:00 p.m.43 views

CVE-2011-1516

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...

8.8AI score0.03533EPSS
SaveExploits11References2
Rows per page
Query Builder