Apple Mac OS X AFP server vulnerable to DoS via maliciously crafted AFP request

Overview A vulnerability in the Apple Mac OS X AFP server may allow an attacker to cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to access files remotely from a server. Apple's Mac OS X AFP server contains ...

Apple Mac OS X AFP server stores reconnect keys in a world-readable file

Overview A vulnerability in Apple Mac OS X AFP server may allow an authenticated local user to access files or folders with the credentials of another user. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. In Apple's Mac OS X...

Integer overflow

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

CVE-2006-1472

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

CVE-2006-1473

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3496

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service crash via an invalid AFP request that triggers an unchecked error condition...

Code injection

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

CVE-2006-1473

Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service crash and execute arbitrary code via unknown vectors...

CVE-2006-3495

CVE-2006-3495 affects Apple Mac OS X Server’s AFP server, where reconnect keys are stored in a world-readable file. An authenticated local user can read these keys and access files/folders of other users using those credentials. The issue is documented across multiple sources and is fixed by Appl...

CVE-2006-3496

CVE-2006-3496 affects Apple Mac OS X AFP Server on 10.3.9 and 10.4.7. A remote attacker can crash the AFP server by sending a specially crafted invalid AFP request, due to an unchecked error condition (leading to denial of service). The vulnerability is addressed in Security Update 2006-004; reme...

CVE-2006-1473

CVE-2006-1473: Integer overflow in Apple Mac OS X AFP Server (affected: Mac OS X 10.3.9 and 10.4.7) allows a remote authenticated attacker to cause a denial of service or execute arbitrary code. AFP Server is not enabled by default. Mitigation: apply Security Update 2006-004 (or update to an patc...

CVE-2006-1472

CVE-2006-1472 concerns the AFP server in Apple Mac OS X 10.3.9, where the search feature can disclose names of files and folders to users without authorization. The issue is an information disclosure vulnerability in the AFP service when file sharing is enabled, allowing unauthorized users to see...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

CVE-2006-1472

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results...

Mac OS X Multiple Vulnerabilities (Security Update 2006-004)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-004. This security update contains fixes for the following applications : AFP Server Bluetooth Bom DHCP dyld fetchmail gnuzip ImageIO LaunchServices OpenSSH telnet WebKit C Tenable Network Security, Inc. include"compat.inc"...

Mac OS X 10.4.x < 10.4.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.7. Mac OS X 10.4.7 contains several security fixes for the following programs : - AFP server - ImageIO - launched - OpenLDAP C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

CVE-2006-1468

Unspecified vulnerability in Apple File Protocol AFP server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information...

Information disclosure

Unspecified vulnerability in Apple File Protocol AFP server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information...

CVE-2006-1468

Affected software: Mac OS X 10.4.x (AFP server). Vulnerability: Unspecified information disclosure in the Apple File Protocol (AFP) server on Mac OS X 10.4 up to 10.4.6 where search results could reveal names of restricted files/folders, potentially exposing sensitive information to remote attack...