Apple AFP Client privilege escalation vulnerability

Overview The Apple File Protocol AFP Client fails to properly clean its environment before executing commands. This vulnerability may allow a local attacker execute commands with elevated privileges. Description The Apple File Protocol service allows Apple Mac OS clients to access files remotely...

Apple Mac OS X AFP server may disclose file and folder information in search results

Overview A vulnerability in the Apple Mac OS X AFP server may disclose file and folder items to unauthorized users. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files stored on a server. When file sharing is enabled, Apple's Mac OS X AFP server...

Apple Mac OS X多个安全漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...

Apple Mac OS X AFP server vulnerable to an integer overflow when file sharing is enabled

Overview A vulnerability in Apple Mac OS X AFP server may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. Apple's M...

Apple Mac OS X AFP server vulnerable to DoS via maliciously crafted AFP request

Overview A vulnerability in the Apple Mac OS X AFP server may allow an attacker to cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to access files remotely from a server. Apple's Mac OS X AFP server contains ...

Apple Mac OS X AFP server stores reconnect keys in a world-readable file

Overview A vulnerability in Apple Mac OS X AFP server may allow an authenticated local user to access files or folders with the credentials of another user. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. In Apple's Mac OS X...

Code injection

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

Integer overflow

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

CVE-2006-1473

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3496

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service crash via an invalid AFP request that triggers an unchecked error condition...

CVE-2006-1472

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

CVE-2006-1473

CVE-2006-1473: Integer overflow in Apple Mac OS X AFP Server (affected: Mac OS X 10.3.9 and 10.4.7) allows a remote authenticated attacker to cause a denial of service or execute arbitrary code. AFP Server is not enabled by default. Mitigation: apply Security Update 2006-004 (or update to an patc...

CVE-2006-1472

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

CVE-2006-1472

CVE-2006-1472 concerns the AFP server in Apple Mac OS X 10.3.9, where the search feature can disclose names of files and folders to users without authorization. The issue is an information disclosure vulnerability in the AFP service when file sharing is enabled, allowing unauthorized users to see...

CVE-2006-1473

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3496

CVE-2006-3496 affects Apple Mac OS X AFP Server on 10.3.9 and 10.4.7. A remote attacker can crash the AFP server by sending a specially crafted invalid AFP request, due to an unchecked error condition (leading to denial of service). The vulnerability is addressed in Security Update 2006-004; reme...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

CVE-2006-3495

CVE-2006-3495 affects Apple Mac OS X Server’s AFP server, where reconnect keys are stored in a world-readable file. An authenticated local user can read these keys and access files/folders of other users using those credentials. The issue is documented across multiple sources and is fixed by Appl...

Mac OS X Multiple Vulnerabilities (Security Update 2006-004)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-004. This security update contains fixes for the following applications : AFP Server Bluetooth Bom DHCP dyld fetchmail gnuzip ImageIO LaunchServices OpenSSH telnet WebKit C Tenable Network Security, Inc. include"compat.inc"...