AFP Server Detection

Binary data 4438.prm...

Buffer overflow

Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted afp:// URL...

CVE-2008-0044

Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted afp:// URL...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0044

Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted afp:// URL...

CVE-2008-0045

CVE-2008-0045 affects Apple Mac OS X 10.4.11: the AFP Server’s handling of Kerberos principal realm names contains an error that could allow remote attackers to bypass cross-realm authentication and establish unauthorized connections. The issue is documented among multiple vulnerabilities address...

CVE-2008-0044

Apple Mac OS X 10.4.11 and 10.5.2 are affected by CVE-2008-0044 due to buffer/stack overflows in the AFP Client when processing afp:// URLs, enabling remote attackers to cause an application crash or execute arbitrary code. The issue is tied to the AFP client’s handling of URLs, with impact descr...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0759

CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...

Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15

Luigi Auriemma Application: EztremeZ-IP File and Printer Server http://www.grouplogic.com/products/extreme/overview.cfm Versions: = 5.1.2x15 Platforms: Windows Bugs: A crash through the SLP service B crash through the AFP service C limited directory traversal in Zidget/HTTP Exploitation: remote...

ExtremeZ-IP Multiple Remote Flaws

Binary data 4371.prm...

CVE-2007-0729

Apple File Protocol AFP Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables...

Command injection

Apple File Protocol AFP Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables...

CVE-2007-0729

The CVE-2007-0729 issue affects Apple File Protocol (AFP) Client in macOS versions 10.3.9–10.4.9, where the AFP Client fails to properly clean its environment before executing commands. This allows a local attacker to gain elevated privileges by manipulating environment variables. The underlying ...

Mac OS X Multiple Vulnerabilities (Security Update 2007-004)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2007-004 applied. This update fixes security flaws in the following applications : AFP Client AirPort CarbonCore diskdevcmds fetchmail ftpd gnutar Help Viewer HID Family Installer Kerberos Libinfo Login Windo...

Apple AFP Client privilege escalation vulnerability

Overview The Apple File Protocol AFP Client fails to properly clean its environment before executing commands. This vulnerability may allow a local attacker execute commands with elevated privileges. Description The Apple File Protocol service allows Apple Mac OS clients to access files remotely...

Apple Mac OS X AFP server may disclose file and folder information in search results

Overview A vulnerability in the Apple Mac OS X AFP server may disclose file and folder items to unauthorized users. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files stored on a server. When file sharing is enabled, Apple's Mac OS X AFP server...

Apple Mac OS X多个安全漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...

Apple Mac OS X AFP server vulnerable to DoS via maliciously crafted AFP request

Overview A vulnerability in the Apple Mac OS X AFP server may allow an attacker to cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to access files remotely from a server. Apple's Mac OS X AFP server contains ...