PT-2014-5909

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 4.0 Description The issue allows local users to discover cleartext passwords by reading a file after a profile setup or edit occurs. This is related to the Profile Manager component. Recommendations For Appl...

APPLE-SA-2014-10-16-5 OS X Server v2.2.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-16-5 OS X Server v2.2.5 OS X Server v2.2.5 is now available and addresses the following: Server Available for: OS X Mountain Lion v10.8.5 Impact: An attacker may be able to decrypt data protected by SSL Description: There are known...

Apple OS X / OS X Server multiple security vulnerabilities

62 vulnerabilities in different system components...

libxcb: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the readpacket function...

Moderate: Red Hat Security Advisory: X11 client libraries security, bug fix, and enhancement update

Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

libXvMC: Array Index error leading to heap-based OOB write

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function...

APPLE-SA-2014-09-17-5 OS X Server 3.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-09-17-5 OS X Server 3.2.1 OS X Server 3.2.1 is now available and addresses the following: CoreCollaboration Available for: OS X Mavericks v10.9.5 or later Impact: A remote attacker may be able to execute arbitrary SQL queries Description...

APPLE-SA-2014-09-17-6 OS X Server 2.2.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-09-17-6 OS X Server 2.2.3 OS X Server 2.2.3 is now available and addresses the following: CoreCollaboration Available for: OS X Mountain Lion v10.8.5 Impact: A remote attacker may be able to execute arbitrary SQL queries Description: A S...

CVE-2014-4406

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4424

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4424

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4406

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4424

CVE-2014-4424 is an SQL injection vulnerability in CoreCollaboration’s Wiki Server on Apple OS X Server, affecting OS X Server before 2.2.3 and OS X Server 3.x before 3.2.1. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Apple addresses include OS X S...

CVE-2014-4406

Apple OS X Server’s CoreCollaboration component (Xcode Server) is affected by CVE-2014-4406, a Cross-site Scripting (XSS) vulnerability in Xcode Server prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected open-source/enter...

PT-2014-5888

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 2.2.3 Apple OS X Server versions 3.x prior to 3.2.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Apple OS X Server versions prior to 2.2.3,...

PT-2014-5870

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 3.2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For Apple OS X Server versions prior to 3.2.1, update to version...

CVE-2014-4406: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Mac OS X : OS X Server < 3.2.1 Multiple Vulnerabilities

The remote Mac OS X 10.9 host has a version of OS X Server installed that is prior to version 3.2.1. It is, therefore, affected by the following vulnerabilities : - Multiple vulnerabilities exist within the included PostgreSQL, the more serious of these allow remote code execution or denial of...