MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0750 | – | May 24 | Integer overflow in CoreGraphics in Apple Mac OS X 10.4 up to 10.4.9 allows remote user-assisted attackers to cause a denial of service (application termination) or execute… Affected: 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +4 more |
| CVE-2007-0753 | – | May 24 | Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter Affected: 10.3; 10.3.1; 10.3.2; 10.3.3; 10.3.4; 10.3.5; +14 more |
| CVE-2007-0752 | – | May 24 | The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to… Affected: 10.4.8 |
| CVE-2007-0751 | – | May 24 | A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of… Affected: 10.3; 10.3.1; 10.3.2; 10.3.3; 10.3.4; 10.3.5; +14 more |
| CVE-2007-0745 | – | May 2 | The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, which might allow remote authenticated users to access… Affected: 10.4.9 |
| CVE-2007-0736 | – | Apr 24 | Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0747 | – | Apr 24 | load_webdav in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when mounting a WebDAV filesystem, which allows local users to gain privileges by… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0746 | – | Apr 24 | Heap-based buffer overflow in the VideoConference framework in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via a "crafted SIP packet… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0744 | – | Apr 24 | SMB in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when executing commands, which allows local users to gain privileges by setting unspecified… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0735 | – | Apr 24 | Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0732 | – | Apr 24 | Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via unspecified vectors involving… Affected: 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +4 more |
| CVE-2007-0729 | – | Apr 24 | Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain… Affected: 10.0; 10.1; 10.1.1; 10.1.2; 10.1.3; 10.1.4; +21 more |
| CVE-2007-0725 | – | Apr 24 | Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through 10.4.9, when running on hardware with the original AirPort wireless card, allows local… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +5 more |
| CVE-2007-0726 | – | Mar 13 | The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-0724 | – | Mar 13 | The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by… Affected: 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +3 more |
| CVE-2007-0723 | – | Mar 13 | Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-0721 | – | Mar 13 | Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-0722 | – | Mar 13 | Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted AppleSingleEncoding disk image Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-0731 | – | Mar 13 | Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code… Affected: 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +3 more |
| CVE-2007-0728 | – | Mar 13 | Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files insecurely while initializing a USB printer, which allows local users to create or… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-0719 | – | Mar 13 | Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via an image with a crafted ColorSync… Affected: 10.3.9; 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; +4 more |
| CVE-2007-1071 | – | Feb 22 | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute… Affected: 10.4.8 |
| CVE-2007-0229 | – | Jan 13 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted… Affected: 10.4.8 |
| CVE-2007-0117 | – | Jan 9 | DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via… Affected: 10.4.8 |
| CVE-2006-5681 | – | Dec 20 | QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that… Affected: 10.4; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +3 more |
| CVE-2006-6353 | – | Dec 7 | Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors… Affected: 10.4.8 |
| CVE-2006-6127 | – | Nov 27 | Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event, then fork a child process that uses kevent… Affected: 10.4.8 |
| CVE-2006-6129 | – | Nov 27 | Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal… Affected: 10.4.8 |
| CVE-2006-6126 | – | Nov 27 | Apple Mac OS X allows local users to cause a denial of service (memory corruption) via a crafted Mach-O binary with a malformed load_command data structure Affected: 10.4.8 |
| CVE-2006-6062 | – | Nov 22 | Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image,… Affected: 10.4.8 |
| CVE-2006-6061 | – | Nov 22 | com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers… Affected: 10.4.8 |
| CVE-2006-3507 | – | Sep 21 | Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by… Affected: 10.3.9; 10.4.7 |
| CVE-2006-3509 | – | Sep 21 | Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute… Affected: 10.4.7 |
| CVE-2006-3508 | – | Sep 21 | Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and… Affected: 10.4.7 |
| CVE-2006-4866 | – | Sep 19 | Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long… Affected: 10.0; 10.1; 10.1.1; 10.1.2; 10.1.3; 10.1.4; +28 more |
| CVE-2006-3506 | – | Aug 21 | Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified… Affected: 10.4.7 |
| CVE-2006-0395 | – | Aug 5 | The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to… Affected: 10.4.5 |
| CVE-2006-0393 | – | Aug 3 | OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes… Affected: 10.4.7 |
| CVE-2006-3505 | – | Aug 3 | WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes… Affected: 10.3.9; 10.4.7 |
| CVE-2006-3504 | – | Aug 3 | The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context… Affected: 10.4.7 |
| CVE-2006-3503 | – | Aug 3 | Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF… Affected: 10.4.7 |
| CVE-2006-0392 | – | Aug 3 | Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon… Affected: 10.4.7 |
| CVE-2006-3502 | – | Aug 3 | Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted… Affected: 10.4.7 |
| CVE-2006-3501 | – | Aug 3 | Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a… Affected: 10.4.7 |
| CVE-2006-3500 | – | Aug 3 | The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths,"… Affected: 10.4.7 |
| CVE-2006-3499 | – | Aug 3 | The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error… Affected: 10.3.9 |
| CVE-2006-3497 | – | Aug 2 | Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application… Affected: 10.3.9; 10.4.7 |
| CVE-2006-3498 | – | Aug 2 | Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to execute arbitrary code via a crafted BOOTP request Affected: 10.3.9; 10.4.7 |
| CVE-2006-3496 | – | Aug 2 | AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that triggers an unchecked error condition Affected: 10.3.9; 10.4.7 |
| CVE-2006-3495 | – | Aug 2 | AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other… Affected: 10.3.9; 10.4.7 |
The 500 most important CVEs for this product (exploited first, then by severity)