NX Server / FreeNX X Server protection bypass

No description provided...

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

CVE-2004-1832

Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service crash and restart via a large amount of data to TCP port 660...

CVE-2004-0825

QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...

CVE-2004-0953

CVE-2004-0953 affects Jabberd (Jabberd 2.x) within the C2S component. The vulnerability is a remote buffer overflow in the C2S/authreg path that handles the username (and realm) without proper length checks, leading to possible denial of service or code execution when a long username is supplied....

CVE-2004-0825

CVE-2004-0825 affects Apple QuickTime Streaming Server used in Mac OS X Server versions 10.2.8, 10.3.4, and 10.3.5. The vulnerability allows a remote attacker to cause a denial-of-service (application deadlock) through a specific sequence of operations. The NVD entry provides a Network attack vec...

CVE-2002-1510

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

CVE-2002-1510

CVE-2002-1510 affects XFree86/xdm: when authComplain is false, arbitrary attackers can connect to the X server if the xdm auth directory does not exist. The vulnerability is documented in multiple sources (e.g., Red Hat advisories RHSA-2003:064/065) and is acknowledged in CVE/NVD listings; the is...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...

CVE-2003-0601

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...

CVE-2003-0601

CVE-2003-0601 : The vulnerability affects Workgroup Manager in Apple Mac OS X Server 10.2–10.2.6, where a new account’s password is not properly disabled before the account is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved. The available source...

CVE-2004-1082

moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...

CVE-2003-0871

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."...

CVE-2003-0379

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

X servers may have insecure default configuration of xhosts

Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...

CVE-2003-0379

CVE-2003-0379 concerns Apple File Service (AFP Server) on Mac OS X Server. When sharing files on a UFS or re‑shared NFS volume, remote attackers could overwrite arbitrary files. The description and public records (NVD) indicate a remote, unauthenticated access vector with low attack complexity, r...

CVE-2003-0379

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

CVE-2003-0420

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...

CVE-2002-0988

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

CVE-2002-0987

The CVE-2002-0987 entry refers to X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 that fail to drop privileges before invoking programs (e.g., xkbcomp) via popen. This behavior could allow local users to gain privileges. The described vulnerability is a local privilege escalation due to inad...