MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0062 | – | Mar 30 | Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0060 | – | Mar 30 | CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0055 | – | Mar 30 | xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package Affected: 10.5.8 |
| CVE-2010-0533 | – | Mar 30 | Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that… Affected: through 10.6.2; 10.6.0; 10.6.1 |
| CVE-2010-0059 | – | Mar 30 | CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted… Affected: 10.6.0; 10.6.1; 10.6.2 |
| CVE-2010-0058 | – | Mar 30 | freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow… Affected: 10.5.8 |
| CVE-2010-0057 | – | Mar 30 | AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access… Affected: through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more |
| CVE-2010-0056 | – | Mar 30 | Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.5.8 |
| CVE-2009-2801 | – | Mar 30 | The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to bypass intended access restrictions via… Affected: 10.5.8 |
| CVE-2010-1119 | – | Mar 25 | Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +8 more |
| CVE-2009-2843 | – | Dec 8 | Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via… Affected: 10.5.8 |
| CVE-2009-2840 | – | Nov 10 | Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges… Affected: 10.5.8 |
| CVE-2009-2839 | – | Nov 10 | Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified… Affected: 10.5.8 |
| CVE-2009-2836 | – | Nov 10 | Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and… Affected: 10.6; 10.6.1 |
| CVE-2009-2835 | – | Nov 10 | The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2834 | – | Nov 10 | IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2833 | – | Nov 10 | Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or… Affected: 10.5.8 |
| CVE-2009-2832 | – | Nov 10 | Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2831 | – | Nov 10 | Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a… Affected: 10.5.8 |
| CVE-2009-2830 | – | Nov 10 | Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a… Affected: 10.6; 10.6.1 |
| CVE-2009-2829 | – | Nov 10 | Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via… Affected: 10.5.8 |
| CVE-2009-2828 | – | Nov 10 | The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Affected: 10.5.8 |
| CVE-2009-2827 | – | Nov 10 | Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.5.8 |
| CVE-2009-2826 | – | Nov 10 | Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.5.8 |
| CVE-2009-2825 | – | Nov 10 | Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate,… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2824 | – | Nov 10 | Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document Affected: 10.5.8 |
| CVE-2009-2823 | – | Nov 10 | The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2820 | – | Nov 10 | The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2819 | – | Nov 10 | AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors Affected: 10.5.8 |
| CVE-2009-2818 | – | Nov 10 | Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2810 | – | Nov 10 | Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to… Affected: 10.6; 10.6.1 |
| CVE-2009-2808 | – | Nov 10 | Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a… Affected: through 10.6.1; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-2814 | – | Sep 14 | Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing… Affected: 10.5.8 |
| CVE-2009-2813 | – | Sep 14 | Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled,… Affected: 10.5.8 |
| CVE-2009-2812 | – | Sep 14 | Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows… Affected: 10.5.8 |
| CVE-2009-2811 | – | Sep 14 | Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not… Affected: 10.5.8 |
| CVE-2009-2809 | – | Sep 14 | ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded… Affected: 10.4.11; 10.5.8 |
| CVE-2009-2807 | – | Sep 14 | Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors Affected: 10.5.8 |
| CVE-2009-2805 | – | Sep 14 | Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.4.11; 10.5.8 |
| CVE-2009-2804 | – | Sep 14 | Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of… Affected: 10.4.11; 10.5.8 |
| CVE-2009-2803 | – | Sep 14 | CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a file with a… Affected: 10.4.11; 10.5.8 |
| CVE-2009-2800 | – | Sep 11 | Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.4.11; 10.5.8 |
| CVE-2009-2205 | – | Sep 9 | Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-2196 | – | Aug 12 | Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via… Affected: 10.4.11; 10.5.7; 10.5.8 |
| CVE-2009-2194 | – | Aug 6 | Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-2193 | – | Aug 6 | Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-2192 | – | Aug 6 | MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-2191 | – | Aug 6 | Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application… Affected: 10.4.11; 10.5.5; 10.5.6; 10.5.7 |
| CVE-2009-2190 | – | Aug 6 | launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-2188 | – | Aug 6 | Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)