CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1828

The CVE-2010-1828 entry affects AFP Server in Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. Root cause: a NULL pointer dereference in AFP Server’s handling of reconnect authentication packets, leading to remote denial of service and daemon restart. Public detail confirms the impact as a crash/resta...

CVE-2010-1829

CVE-2010-1829 affects AFP Server on Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a directory traversal flaw allows an authenticated remote user to create files outside a share, potentially enabling arbitrary code execution. Apple patched via improved path validation in Security Update 2010-007, speci...

CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon restart via crafted reconnect authentication packets...

CVE-2010-1803

Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume...

CVE-2010-1803

Technical details about CVE-2010-1803 are not publicly provided in the supplied connected documents. Please monitor vendor advisories and security trackers for updates.

CVE-2010-1830

CVE-2010-1830 concerns AFP Server in Apple Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. An error-handling difference depending on whether a share exists enables remote attackers to enumerate valid share names via unspecified vectors. The issue is addressed by Apple in Security Update 2010-007 (Mac...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

Mac OS X Multiple Vulnerabilities (Security Update 2010-007)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. This security update contains fixes for the following products : - AFP Server - Apache modperl - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services - diskdevcmds - Disk...

Mac OS X AFP Server绕过口令验证漏洞

BUGTRAQ ID: 43341 CVECAN ID: CVE-2010-1820 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的AFP Server服务器中存在绕过口令验证漏洞，用户只需知道目标机器上的账号就可以访问AFP共享的文件夹。 Apple Mac OS X 10.6.4 Apple MacOS X Server 10.6.4 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/support/downloads/...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

CVE-2010-1820

The CVE-2010-1820 issue affects Apple Mac OS X AFP Server (10.6.x up to 10.6.4). The vulnerability stems from improper error handling, allowing a remote attacker who knows a valid account name to bypass the password requirement for AFP shared-folder access. Affected product: Mac OS X AFP Server; ...

Apple Releases Security Update 2010-006

Apple has released security update 2010-006 for Mac OS X and Mac OS X Server to address a vulnerability in the AFP package. This vulnerability may allow an attacker to bypass password validation and obtain sensitive information. The article indicates that this vulnerability does not affect system...

Mac OS X AFP Shared Folders Unauthenticated Access (Security Update 2010-006) (uncredentialed check)

Binary data afpmalformedpassword.nbin...

Mac OS X AFP Shared Folders Unauthenticated Access (Security Update 2010-006)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2010-006 applied. This security update fixes an issue in AFP Server by which a remote attacker with knowledge of an account name on the affected system may be able to bypass the password validation and access...

Format string

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

CVE-2010-1376

CVE-2010-1376 involves multiple format string vulnerabilities in Apple Mac OS X 10.6’s Network Authorization. According to the connected sources, the flaw resides in how format string specifiers are processed for AFP/CIFS/SMB URLs, potentially allowing a remote attacker to execute arbitrary code ...

CVE-2010-1376

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003

The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International...