MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-1411 | – | Jun 17 | Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1382 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1381 | – | Jun 17 | The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1380 | – | Jun 17 | Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1379 | – | Jun 17 | Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service (printing failure) by… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1377 | – | Jun 17 | Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1376 | – | Jun 17 | Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1375 | – | Jun 17 | NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local users to gain privileges via… Affected: 10.5.8 |
| CVE-2010-1374 | – | Jun 17 | Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1373 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help:… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0546 | – | Jun 17 | Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0545 | – | Jun 17 | The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0543 | – | Jun 17 | ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Affected: 10.5.8; 10.6.0; 10.6.1 |
| CVE-2010-0541 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0540 | – | Jun 17 | Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms,… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0537 | – | Mar 30 | DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0535 | – | Mar 30 | Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0534 | – | Mar 30 | Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0526 | – | Mar 30 | Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0525 | – | Mar 30 | Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail… Affected: through 10.6.2; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +6 more |
| CVE-2010-0524 | – | Mar 30 | The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0523 | – | Mar 30 | Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified… Affected: 10.5.8 |
| CVE-2010-0522 | – | Mar 30 | Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated… Affected: 10.5.8 |
| CVE-2010-0521 | – | Mar 30 | Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0520 | – | Mar 30 | Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0519 | – | Mar 30 | Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0518 | – | Mar 30 | QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0517 | – | Mar 30 | Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0516 | – | Mar 30 | Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0515 | – | Mar 30 | QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0514 | – | Mar 30 | Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0513 | – | Mar 30 | Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0512 | – | Mar 30 | The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0511 | – | Mar 30 | Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0510 | – | Mar 30 | Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0509 | – | Mar 30 | SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0508 | – | Mar 30 | Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0507 | – | Mar 30 | Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0506 | – | Mar 30 | Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image Affected: 10.5.8 |
| CVE-2010-0505 | – | Mar 30 | Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0504 | – | Mar 30 | Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0503 | – | Mar 30 | Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0502 | – | Mar 30 | iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0501 | – | Mar 30 | Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0500 | – | Mar 30 | Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0498 | – | Mar 30 | Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0497 | – | Mar 30 | Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0065 | – | Mar 30 | Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0064 | – | Mar 30 | DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0063 | – | Mar 30 | Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
The 500 most important CVEs for this product (exploited first, then by severity)