Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003

The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

afp-serverinfo NSE Script

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example Macmini or MacBookPro. Script Arguments afp.password, afp.username See the documentation for the afp library. Example Usage nmap -sV -sC Script Output PORT STATE...

Directory traversal

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

Cross site request forgery (csrf)

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

CVE-2010-0057

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

CVE-2010-0057

CVE-2010-0057 : AFP Server in macOS before 10.6.3 fails to prevent guest access to AFP shares when guest access is disabled, allowing a remote user to mount AFP shares as a guest and bypass access restrictions. Affected: Mac OS X v10.5.8/v10.6 through v10.6.2 (and corresponding Server variants). ...

CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

CVE-2010-0057

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request...

CVE-2010-0533

CVE-2010-0533 is a directory-traversal vulnerability in Apple Mac OS X AFP Server prior to 10.6.3. It allows remote attackers to list a share root’s parent directory and read/modify files there via unspecified vectors. Affected: AFP Server on Mac OS X before 10.6.3. Impact: partial confidentialit...

AFP Server Share Enumeration (guest)

The remote AFP server allows guest users to connect to several shares. Make sure this is in line with your organization's security policy. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45380; scriptversion "$Revision: 1.3 $"; scriptnameenglish:"AFP Server Share...

Mac OS X < 10.6.3 Multiple Vulnerabilities

Binary data 5489.prm...

afp-path-vuln NSE Script

Detects the Mac OS X AFP directory traversal vulnerability, CVE-2010-0533. This script attempts to iterate over all AFP shares on the remote host. For each share it attempts to access the parent directory by exploiting the directory traversal vulnerability as described in CVE-2010-0533. The scrip...

afp-brute NSE Script

Performs password guessing against Apple Filing Protocol AFP. Script Arguments afp.password, afp.username See the documentation for the afp library. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. Example Usage nmap -p 548 --scrip...

AFP Server Directory Traversal

The remote AFP server allows guest users to read files located outside public shares by sending requests to the '..' directory. An attacker could use this flaw to read every file on this host. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45374; scriptversion "1.11...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...

Mac OS X Multiple Vulnerabilities (Security Update 2010-002)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied. This security update contains fixes for the following products : - AppKit - Application Firewall - AFP Server - Apache - ClamAV - CoreTypes - CUPS - curl - Cyrus IMAP - Cyrus SASL - Disk...

afp-showmount NSE Script

Shows AFP shares and ACLs. Script Arguments afp.password, afp.username See the documentation for the afp library. Example Usage nmap -sV --script=afp-showmount Script Output PORT STATE SERVICE 548/tcp open afp | afp-showmount: | Yoda's Public Folder | Owner: Search,Read,Write | Group: Search,Read...

Null pointer dereference

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service NULL pointer dereference, memory consumption, ABEND, and crash via a large number of malformed or AFP requests that are not properly handled by 1 the CIFS functionality in CIFS.nlm Semantic Agent Build 163 MP 3.27 or 2 th...