Mac OS X Server Web Services Version Detection

The remote host is running Mac OS X Server Web Services, a set of services for handling remote web services such as a wiki and a calendar. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45439; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Ma...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

Directory traversal

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

Design/Logic Flaw

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

Stack overflow

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Design/Logic Flaw

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0504

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0503

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

Default configuration

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

Code injection

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-2010-0503

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2010-0502

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

CVE-2010-0510

CVE-2010-0510 affects Password Server in Apple Mac OS X Server before 10.6.3. The issue is an incorrect password replication process that could allow remote authenticated users to log in using an expired password. The described root cause is an implementation flaw in how passwords are replicated....

CVE-2010-0504

CVE-2010-0504 describes multiple stack-based buffer overflows in iChat Server of Mac OS X Server prior to 10.6.3. Exploitation could allow a remote attacker to execute arbitrary code or cause a denial of service via unspecified vectors; the flaws are specific to iChat Server and are addressed by ...

CVE-2010-0522

CVE-2010-0522 affects Apple Mac OS X Server 10.5.8, where Server Admin fails to correctly determine privileges for users previously in the admin group. The underlying issue allows remote authenticated users to leverage former membership to establish a server connection via screen sharing. The ava...