CVE-2010-0501

CVE-2010-0501 describes a directory traversal vulnerability in the FTP Server of Apple Mac OS X Server, affecting versions before Mac OS X Server 10.6.3. An authenticated remote user could read arbitrary files by crafting filenames. The vulnerability is tied to the FTP server component and is add...

CVE-2010-0504

CVE-2010-0504 describes multiple stack-based buffer overflows in iChat Server of Mac OS X Server prior to 10.6.3. Exploitation could allow a remote attacker to execute arbitrary code or cause a denial of service via unspecified vectors; the flaws are specific to iChat Server and are addressed by ...

CVE-2010-0522

CVE-2010-0522 affects Apple Mac OS X Server 10.5.8, where Server Admin fails to correctly determine privileges for users previously in the admin group. The underlying issue allows remote authenticated users to leverage former membership to establish a server connection via screen sharing. The ava...

CVE-2010-0502

The CVE-2010-0502 flaw affects iChat Server on Apple Mac OS X Server, where group-chat logging could exclude certain message types. A design issue allowed remote users to send messages through the server without being fully logged. Affected platforms include Mac OS X Server v10.5.8 and v10.6–v10....

CVE-2010-0504

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0502

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

CVE-2010-0510

CVE-2010-0510 affects Password Server in Apple Mac OS X Server before 10.6.3. The issue is an incorrect password replication process that could allow remote authenticated users to log in using an expired password. The described root cause is an implementation flaw in how passwords are replicated....

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2010-0510

Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-2010-0503

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0501: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0502: Undefined Security Weakness

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

CVE-2010-0504: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0522: Undefined Security Weakness

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-2010-0521: Improper Authentication

Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests...

CVE-2010-0524: Undefined Security Weakness

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

Mac OS X FTP Server Directory Traversal

The remote FTP server contains a directory traversal vulnerability that may allow an anonymous user to retrieve files outside the FTP root directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45381; scriptversion"1.13"; scriptcvsdate"Date: 2018/07/14 1:59:35";...

CVE-2010-0503: Undefined Security Weakness

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...