CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-2010-0503

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2010-0504

CVE-2010-0504 describes multiple stack-based buffer overflows in iChat Server of Mac OS X Server prior to 10.6.3. Exploitation could allow a remote attacker to execute arbitrary code or cause a denial of service via unspecified vectors; the flaws are specific to iChat Server and are addressed by ...

CVE-2010-0502

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

CVE-2010-0502

The CVE-2010-0502 flaw affects iChat Server on Apple Mac OS X Server, where group-chat logging could exclude certain message types. A design issue allowed remote users to send messages through the server without being fully logged. Affected platforms include Mac OS X Server v10.5.8 and v10.6–v10....

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0501

CVE-2010-0501 describes a directory traversal vulnerability in the FTP Server of Apple Mac OS X Server, affecting versions before Mac OS X Server 10.6.3. An authenticated remote user could read arbitrary files by crafting filenames. The vulnerability is tied to the FTP server component and is add...

CVE-2010-0504

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0522

CVE-2010-0522 affects Apple Mac OS X Server 10.5.8, where Server Admin fails to correctly determine privileges for users previously in the admin group. The underlying issue allows remote authenticated users to leverage former membership to establish a server connection via screen sharing. The ava...

CVE-2010-0510

Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

Mac OS X FTP Server Directory Traversal

The remote FTP server contains a directory traversal vulnerability that may allow an anonymous user to retrieve files outside the FTP root directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45381; scriptversion"1.13"; scriptcvsdate"Date: 2018/07/14 1:59:35";...

CentOS 5 : gdm (CESA-2009:1364)

Updated gdm packages that fix a security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNOME Display Manager GDM is a configurable re-implementation of XDM, the X Display...

CentOS 5 : freetype (CESA-2009:1061)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine that can open and manage font...

Apple Mac OS X 2009-006更新修复多个安全漏洞

BUGTRAQ ID: 36956 CVE ID:...

Code injection

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

CVE-2009-3839 concerns an unspecified vulnerability in the Solaris Trusted Extensions Policy configuration on Sun Solaris 10 and OpenSolaris snv_37 through snv_125. The issue could allow remote attackers to execute arbitrary code by leveraging access to the X server. Affected products are Solaris...