CVE-2017-17708

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3...

PT-2018-6551

Name of the Vulnerable Software and Affected Versions: Pleasant Password Server versions prior to 7.8.3 Description: The issue arises from missing authorization checks, allowing any authenticated user to list, upload, or delete attachments to password safe entries. To perform these actions, a use...

CVE-2017-17708: Incorrect Authorization

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3...

PT-2018-6552

Name of the Vulnerable Software and Affected Versions: Pleasant Password Server versions prior to 7.8.3 Description: The issue is due to insufficient authorization checks, allowing any authenticated user to modify profile data of other users. Recommendations: For versions prior to 7.8.3, update t...

CVE-2017-17707: Missing Authorization

Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3. To perform those actions on an entry, the user needs to know the corresponding "CredentialId" value, which uniquely...

Apple Mac OS X and QuickTime multiple security vulnerabilities

Multiple vulnerabilities in kernel, networking components, printing services, AFP Server, AppKit, Apple Type Services, CFNetwork, CoreGraphics, CoreText, Directory Services, diskdevcmds, Disk Images, Image Capture, ImageIO, Image RAW, Password Server, QuickLook, QuickTime, Safari RSS, Time Machin...

Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)

This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 OpenVAS Vulnerability Test $Id: gbmacosxsu10-007.nasl 7052 2017-09-04 11:50:51Z teissa $ Mac OS X v10.6.4 Multiple Vulnerabilities 2010-007 Authors: Madhuri D Copyright: Copyrig...

CVE-2010-3783

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors...

CVE-2010-3783

Summary: CVE-2010-3783 affects Password Server on Apple Mac OS X Server 10.5.8 and 10.6.x up to 10.6.4, where a replication handling issue can allow remote authenticated users to bypass current-password verification. What’s affected: Password Server’s replication process (unspecified vectors) may...

CVE-2010-3783

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors...

CVE-2010-3783: Undefined Security Weakness

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors...

PT-2010-5070

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description The issue is related to the Password Server in Apple Mac OS X, which does not properly perform replication. This allows remote authenticated users to bypass verification of the current...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

Mac OS X Multiple Vulnerabilities (Security Update 2010-007)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. This security update contains fixes for the following products : - AFP Server - Apache modperl - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services - diskdevcmds - Disk...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. One or more of the following components are affected: AppKit Application Firewall AFP Server Apache ClamAV CoreAudio CoreMedia CoreTypes CUPS curl Cyrus IMAP Cyrus SASL DesktopServices Disk Images Directory...

Design/Logic Flaw

Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password...

CVE-2010-0510

Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password...

CVE-2010-0510

CVE-2010-0510 affects Password Server in Apple Mac OS X Server before 10.6.3. The issue is an incorrect password replication process that could allow remote authenticated users to log in using an expired password. The described root cause is an implementation flaw in how passwords are replicated....

CVE-2010-0510: Undefined Security Weakness

Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password...