1781 matches found
CVE-2004-1832
CVE-2004-1832 : Affects Mac OS X Server 10.3, specifically the GUI admin service. The issue is a buffer overflow triggered by a large amount of data sent to TCP port 660, resulting in a denial of service (crash and restart). Exploitation details are not provided in the connected documents. No rem...
CVE-2004-1832
Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service crash and restart via a large amount of data to TCP port 660...
Apple Mac OS X Server Admin fails to properly restrict users from using the proxy service
Overview The Apple Mac OS X Server HTTP proxy service does not restrict access by default and may allow unintended remote users to use the service. Description Mac OS X Server includes a service to provide for HTTP proxying. The HTTP proxy service does not include any access restrictions in the...
CVE-2004-1082
CVE-2004-1082 affects Apache 1.3.31 and 1.3.32 on Mac OS X Server. The vulnerability arises in mod_digest_apple where the server does not properly verify the nonce in a client response, allowing remote attackers to replay credentials. The NVD entry (CVSS v2 base score 7.5, HIGH) indicates a netwo...
CVE-2003-0420
Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...
CVE-2003-0420
CVE-2003-0420 describes an information-leak in dsimportexport on Apple Macintosh OS X Server 10.2.6, where local users can obtain the username and password of the account running the tool. The connected Apple Security Update 2003-06-12 documents fixing this issue by updating Apache 2 and explicit...
NX Server / FreeNX X Server protection bypass
No description provided...
CVE-2005-0579
nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...
CVE-2004-1832
Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service crash and restart via a large amount of data to TCP port 660...
CVE-2004-0825
QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...
CVE-2004-0953
CVE-2004-0953 affects Jabberd (Jabberd 2.x) within the C2S component. The vulnerability is a remote buffer overflow in the C2S/authreg path that handles the username (and realm) without proper length checks, leading to possible denial of service or code execution when a long username is supplied....
CVE-2004-0825
CVE-2004-0825 affects Apple QuickTime Streaming Server used in Mac OS X Server versions 10.2.8, 10.3.4, and 10.3.5. The vulnerability allows a remote attacker to cause a denial-of-service (application deadlock) through a specific sequence of operations. The NVD entry provides a Network attack vec...
CVE-2002-1510
xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...
CVE-2002-1510
CVE-2002-1510 affects XFree86/xdm: when authComplain is false, arbitrary attackers can connect to the X server if the xdm auth directory does not exist. The vulnerability is documented in multiple sources (e.g., Red Hat advisories RHSA-2003:064/065) and is acknowledged in CVE/NVD listings; the is...
Default Password (12345678) for 'root' Account on MacOS X Server
Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...
CVE-2003-0601
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...
CVE-2003-0601
CVE-2003-0601 : The vulnerability affects Workgroup Manager in Apple Mac OS X Server 10.2–10.2.6, where a new account’s password is not properly disabled before the account is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved. The available source...
CVE-2004-1082
moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...