CVE-2004-1082

CVE-2004-1082 affects Apache 1.3.31 and 1.3.32 on Mac OS X Server. The vulnerability arises in mod_digest_apple where the server does not properly verify the nonce in a client response, allowing remote attackers to replay credentials. The NVD entry (CVSS v2 base score 7.5, HIGH) indicates a netwo...

CVE-2004-1082: Undefined Security Weakness

moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...

CVE-2003-0420

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...

CVE-2003-0420

CVE-2003-0420 describes an information-leak in dsimportexport on Apple Macintosh OS X Server 10.2.6, where local users can obtain the username and password of the account running the tool. The connected Apple Security Update 2003-06-12 documents fixing this issue by updating Apache 2 and explicit...

CVE-2003-0420: Undefined Security Weakness

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...

NX Server / FreeNX X Server protection bypass

No description provided...

CVE-2005-0579: Undefined Security Weakness

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

CVE-2004-1832

Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service crash and restart via a large amount of data to TCP port 660...

CVE-2004-0825

QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...

CVE-2004-0953

CVE-2004-0953 affects Jabberd (Jabberd 2.x) within the C2S component. The vulnerability is a remote buffer overflow in the C2S/authreg path that handles the username (and realm) without proper length checks, leading to possible denial of service or code execution when a long username is supplied....

CVE-2004-0825

CVE-2004-0825 affects Apple QuickTime Streaming Server used in Mac OS X Server versions 10.2.8, 10.3.4, and 10.3.5. The vulnerability allows a remote attacker to cause a denial-of-service (application deadlock) through a specific sequence of operations. The NVD entry provides a Network attack vec...

CVE-2004-0825: Undefined Security Weakness

QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...

CVE-2002-1510

CVE-2002-1510 affects XFree86/xdm: when authComplain is false, arbitrary attackers can connect to the X server if the xdm auth directory does not exist. The vulnerability is documented in multiple sources (e.g., Red Hat advisories RHSA-2003:064/065) and is acknowledged in CVE/NVD listings; the is...

CVE-2002-1510

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

CVE-2002-1510: Undefined Security Weakness

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...

CVE-2003-0601

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...

CVE-2003-0601

CVE-2003-0601 : The vulnerability affects Workgroup Manager in Apple Mac OS X Server 10.2–10.2.6, where a new account’s password is not properly disabled before the account is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved. The available source...

CVE-2003-0601: Undefined Security Weakness

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...