Code injection

Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

Cross site request forgery (csrf)

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DSStore and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request...

CVE-2016-1777

Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2016-1787

Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors...

CVE-2016-1776

CVE-2016-1776 affects Apple OS X Server before 5.1, in the Web Server component. The issue is an information disclosure where access to .DS_Store and .htaccess files is not properly restricted, allowing remote attackers to obtain sensitive configuration information via HTTP. Mitigation: upgrade t...

CVE-2016-1787

CVE-2016-1787 affects Wiki Server in Apple OS X Server prior to 5.1. The Apple security bulletin describes an access issue in Wiki Server where an attacker in a privileged network position may leak sensitive user information from Wiki pages via unspecified vectors. The entry implies a fix is incl...

CVE-2016-1774

The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictio...

CVE-2016-1776

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DSStore and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request...

CVE-2016-1774

Affected software: Apple OS X Server (Server App) prior to version 5.1. The Time Machine server backup feature fails to warn when permissions are ignored, enabling potential information disclosure by reading backups that lack required restrictions. Root cause: improper/warnings about ignored perm...

CVE-2016-1787: Exposure of Sensitive Information to an Unauthorized Actor

Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors...

CVE-2016-1774: Improper Access Control

The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictio...

PT-2016-1534

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.1 Description The issue is related to insufficient access control in the Time Machine server component of Server App in OS X Server. This can be exploited by a remote attacker to obtain sensitive information by...

PT-2016-1521

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.1 Description The issue is related to the lack of protection for service data in the Wiki Server component of OS X Server, allowing remote attackers to obtain sensitive information from Wiki pages. Recommendatio...

CVE-2016-1777: Undefined Security Weakness

Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

PT-2016-1531

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 5.1 Description The issue is related to the Web Server component in Apple OS X Server, which supports the RC4 algorithm. This makes it easier for remote attackers to defeat cryptographic protection mechanism...

CVE-2016-1776: Improper Access Control

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DSStore and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request...

PT-2016-1532

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 5.1 Description The issue is related to the Web Server component in Apple OS X Server, which does not properly restrict access to .DS Store and .htaccess files. This allows remote attackers to obtain sensiti...

About the security content of OS X Server 5.1

About the security content of OS X Server 5.1 This document describes the security content of OS X Server 5.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are...

Apple Releases Multiple Security Updates

Apple has released security updates for iOS, watchOS, tvOS, Xcode, OS X El Capitan, OS X Server 5.1, and Safari to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: iOS 9.3...

OpenSSH Authentication Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers maintained by the OpenBSD Project Group. The tools are an open source implementation of the SSH protocol and support encryption of all transmissions, effectively blocking eavesdropping, connection...