CVE-2005-4217: Undefined Security Weakness

Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$" variable to set uid, which allows attackers to gain privileges...

CVE-2005-3704

CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...

CVE-2005-3705

Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2005-3702

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

CVE-2005-3702

CVE-2005-3702 affects Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3. The vulnerability allows remote attackers to cause files to be downloaded to locations outside the download directory by supplying a long file name. The connected documents provide the affected products and the exact impa...

CVE-2005-3701

Technical details about CVE-2005-3701 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3705

CVE-2005-3705 concerns a heap-based buffer overflow in WebKit used by Mac OS X and OS X Server 10.3.9 and 10.4.3, including Safari. The underlying issue is in WebKit’s handling of certain inputs, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Affected produc...

CVE-2005-3701

Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors...

CVE-2005-3700

Technical details for CVE-2005-3700 are not publicly provided in the supplied documents. Monitor for updates when additional information becomes available.

CVE-2005-3704

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

CVE-2005-2757

CVE-2005-2757 affects Mac OS X and OS X Server 10.4–10.4.3. The issue is a heap-based buffer overflow in CoreFoundation, exploitable by remote attackers to run arbitrary code through how URLs are validated. The description in the connected documents confirms the vulnerability and affected compone...

CVE-2005-3700: Undefined Security Weakness

Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors...

CVE-2005-2757: Undefined Security Weakness

Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."...

CVE-2005-3702: Undefined Security Weakness

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name...

CVE-2005-3704: Undefined Security Weakness

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

CVE-2005-3701: Undefined Security Weakness

Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors...

Open X Server

An improperly configured X server will accept connections from clients from anywhere. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Open X Server

An improperly configured X server will accept connections from clients from anywhere. This allows an attacker to make a client connect to the X server to record the keystrokes of the user, which may contain sensitive information, such as account passwords. To solve this problem, use xauth or MIT...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2005:164)

A vulnerability was discovered in the pixmap allocation handling of the X server that can lead to local privilege escalation. By allocating a huge pixmap, a local user could trigger an integer overflow that resulted in a memory allocation that was too small for the requested pixmap, leading to a...

SUSE-SA:2005:056: XFree86-server,xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2005:056 XFree86-server,xorg-x11-server. The X server memory can be accessed my a malicious X client by exploiting a missing range check in the function XCreatePixmap. This bug can probably be used to execute arbitrary code with the...