MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3435 | – | Oct 14 | Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors Affected: 10.7.0; 10.7.1 |
| CVE-2011-3246 | – | Oct 14 | CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and… Affected: 10.7.0; 10.7.1 |
| CVE-2011-3228 | – | Oct 14 | QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3227 | – | Oct 14 | libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list (CRL), which allows… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3226 | – | Oct 14 | Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypass the password requirement by… Affected: 10.7.0; 10.7.1 |
| CVE-2011-3225 | – | Oct 14 | The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which… Affected: 10.7.0; 10.7.1 |
| CVE-2011-3224 | – | Oct 14 | The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3223 | – | Oct 14 | Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLIC… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3222 | – | Oct 14 | Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3221 | – | Oct 14 | QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3220 | – | Oct 14 | QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3218 | – | Oct 14 | The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3217 | – | Oct 14 | MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3216 | – | Oct 14 | The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3215 | – | Oct 14 | The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3214 | – | Oct 14 | IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3213 | – | Oct 14 | The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3212 | – | Oct 14 | CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate… Affected: 10.7.0; 10.7.1 |
| CVE-2011-0260 | – | Oct 14 | The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow… Affected: 10.7.0; 10.7.1 |
| CVE-2011-0231 | – | Oct 14 | CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie,… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-0230 | – | Oct 14 | Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 10.7.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-0229 | – | Oct 14 | Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-0224 | – | Oct 14 | CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-0185 | – | Oct 14 | Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an… Affected: through 10.7.1; 10.7.0; 10.6.0; 10.6.1; 10.6.2; 10.6.3; +5 more |
| CVE-2011-3422 | – | Sep 12 | The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier… Affected: through 10.6.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +3 more |
| CVE-2011-1132 | – | Jun 24 | The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer dereference and reboot) via vectors involving… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0212 | – | Jun 24 | servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0208 | – | Jun 24 | QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0207 | – | Jun 24 | The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0206 | – | Jun 24 | Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0205 | – | Jun 24 | Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +3 more |
| CVE-2011-0204 | – | Jun 24 | Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +3 more |
| CVE-2011-0203 | – | Jun 24 | Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0202 | – | Jun 24 | Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +3 more |
| CVE-2011-0201 | – | Jun 24 | Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0200 | – | Jun 24 | Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0198 | – | Jun 24 | Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +2 more |
| CVE-2011-0197 | – | Jun 24 | App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +3 more |
| CVE-2011-0196 | – | Jun 24 | AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) via Wi-Fi frames on the local wireless network Affected: 10.5.8 |
| CVE-2011-0175 | – | Mar 23 | Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0194 | – | Mar 23 | Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-0193 | – | Mar 23 | Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-0190 | – | Mar 23 | Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-0189 | – | Mar 23 | The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-0184 | – | Mar 23 | QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-0183 | – | Mar 23 | Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service… Affected: through 10.6.6; 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; +2 more |
| CVE-2011-0182 | – | Mar 23 | The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0181 | – | Mar 23 | Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM… Affected: through 10.6.6; 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; +2 more |
| CVE-2011-0180 | – | Mar 23 | Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0179 | – | Mar 23 | CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
The 500 most important CVEs for this product (exploited first, then by severity)