EUVD-2009-2197

Malware in sbrugna...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Design/Logic Flaw

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201

The CVE-2009-2201 issue affects Apple Xsan Admin: screensharing in Xsan Admin before 2.2 exposes a cleartext username and password in a URL within an error dialog. This local-authentication leakage can be read by physically proximate attackers who view the dialog. Affected component: Xsan Admin s...

Apple Xsan文件系统路径名缓冲区溢出漏洞

Apple Xsan是一款文件系统，可让多个Xserve服务器在SAN网络中，通过光纤通道在文件级别的并行存取工作。 Apple Xsan处理路径名缺少正确的边界条件检查，远程攻击者可以利用漏洞以系统进程权限执行任意指令。 Apple Xsan文件系统驱动处理路径名时存在缓冲区溢出，恶意用户可以通过访问Xsan卷触发此漏洞，可导致系统崩溃或以进程权限执行任意指令。 Apple Xsan 1.3 Apple Xsan 1.2 Apple Xsan 1.0 下载Xsan Filesystem 1.4： http://www.apple.com/xsan/...