CVE-2005-4217

The CVE-2005-4217 issue affects Perl in Apple Mac OS X Server 10.3.9, where privileges are not properly dropped when using the $

CVE-2005-4217

Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$" variable to set uid, which allows attackers to gain privileges...

CVE-2005-4217: Undefined Security Weakness

Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$" variable to set uid, which allows attackers to gain privileges...

CVE-2005-3704

CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...

CVE-2005-3701

Technical details about CVE-2005-3701 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3701

Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors...

CVE-2005-3702

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

CVE-2005-3705

Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2005-3702

CVE-2005-3702 affects Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3. The vulnerability allows remote attackers to cause files to be downloaded to locations outside the download directory by supplying a long file name. The connected documents provide the affected products and the exact impa...

CVE-2005-3705

CVE-2005-3705 concerns a heap-based buffer overflow in WebKit used by Mac OS X and OS X Server 10.3.9 and 10.4.3, including Safari. The underlying issue is in WebKit’s handling of certain inputs, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Affected produc...

CVE-2005-2757

CVE-2005-2757 affects Mac OS X and OS X Server 10.4–10.4.3. The issue is a heap-based buffer overflow in CoreFoundation, exploitable by remote attackers to run arbitrary code through how URLs are validated. The description in the connected documents confirms the vulnerability and affected compone...

CVE-2005-3704

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

CVE-2005-3700

Technical details for CVE-2005-3700 are not publicly provided in the supplied documents. Monitor for updates when additional information becomes available.

CVE-2005-2757: Undefined Security Weakness

Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."...

CVE-2005-3702: Undefined Security Weakness

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

CVE-2005-3700: Undefined Security Weakness

Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors...

CVE-2005-3704: Undefined Security Weakness

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

CVE-2005-3701: Undefined Security Weakness

Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors...

Open X Server

An improperly configured X server will accept connections from clients from anywhere. This allows an attacker to make a client connect to the X server to record the keystrokes of the user, which may contain sensitive information, such as account passwords. To solve this problem, use xauth or MIT...

Open X Server

An improperly configured X server will accept connections from clients from anywhere. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...