CveMateVulnerability intelligence

Apple Mac Os X Server vulnerabilities

655 vulnerabilities

Known vulnerabilities in Apple Mac Os X Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2003-1006applemac_os_x+122y ago10-03-2004 05:00

Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.CVE-2003-1007applemac_os_x+122y ago10-03-2004 05:00

AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.CVE-2003-1005applemac_os_x+121y ago14-04-2005 04:00

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.CVE-2003-1008applemac_os_x+122y ago10-03-2004 05:00

Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.CVE-2003-1009applemac_os_x+122y ago10-03-2004 05:00

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.CVE-2003-0171applemac_os_x+123y ago15-04-2003 04:00

DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.CVE-2003-0975applemac_os_x+222y ago10-12-2003 05:00

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.CVE-2003-0681applemac_os_x+1423y ago18-09-2003 04:00

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.CVE-2003-0049applemac_os_x+123y ago26-02-2003 05:00

Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.CVE-2003-0466applemac_os_x+823y ago01-08-2003 04:00

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.CVE-2003-0871applemac_os_x+122y ago30-10-2003 05:00

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."CVE-2003-0601applemac_os_x_server22y ago10-03-2004 05:00

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.CVE-2003-0804applemac_os_x+323y ago25-09-2003 04:00

The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.CVE-2003-0694applemac_os_x+1823y ago18-09-2003 04:00

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2003-0913applemac_os_x+122y ago06-11-2003 05:00

Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."CVE-2003-0420applemac_os_x_server21y ago14-04-2005 04:00

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.CVE-2003-0198applemac_os_x+123y ago15-04-2003 04:00

Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.CVE-2003-0518applemac_os_x+123y ago10-07-2003 04:00

The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.CVE-2003-0876applemac_os_x+122y ago30-10-2003 05:00

Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.CVE-2013-1024applemac_os_x+113y ago05-06-2013 10:00

CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.