MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-4218 | – | Dec 17 | Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2)… Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-4217 | – | Dec 17 | Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a… Affected: through 10.5.5; 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; +1 more |
| CVE-2008-4215 | – | Oct 10 | Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which… Affected: 10.4.11 |
| CVE-2008-4214 | – | Oct 10 | Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to cause the scripting dictionary to be written to arbitrary locations, related to an… Affected: 10.4.11; 10.5.5 |
| CVE-2008-4212 | – | Oct 10 | Unspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5 applies hosts.equiv entries to root despite what is stated in documentation, which… Affected: 10.4.11; 10.5.5 |
| CVE-2008-4211 | – | Oct 10 | Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows… Affected: 10.5.5 |
| CVE-2008-3647 | – | Oct 10 | Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a… Affected: 10.4.11; 10.5.5 |
| CVE-2008-3645 | – | Oct 10 | Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd (Networking component) in Mac OS X 10.4.11 and 10.5.5 allows local users to execute… Affected: 10.4.11; 10.5.5 |
| CVE-2008-3643 | – | Oct 10 | Unspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to cause a denial of service (continuous termination and restart) via a crafted Desktop file… Affected: 10.5.5 |
| CVE-2008-3642 | – | Oct 10 | Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via… Affected: 10.4.11; 10.5.5 |
| CVE-2008-3638 | – | Sep 26 | Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs Affected: 10.5.4; 10.5.5 |
| CVE-2008-3622 | – | Sep 16 | Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3621 | – | Sep 16 | VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3619 | – | Sep 16 | Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3617 | – | Sep 16 | Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3616 | – | Sep 16 | Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3611 | – | Sep 16 | Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic,… Affected: 10.4.11 |
| CVE-2008-3610 | – | Sep 16 | Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3609 | – | Sep 16 | The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-3608 | – | Sep 16 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2332 | – | Sep 16 | ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2331 | – | Sep 16 | Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a… Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2330 | – | Sep 16 | slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2329 | – | Sep 16 | Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window Affected: 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2312 | – | Sep 16 | Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this… Affected: 10.4.11 |
| CVE-2008-2305 | – | Sep 16 | Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-2324 | – | Aug 4 | The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing… Affected: 10.4.11 |
| CVE-2008-2313 | – | Jul 1 | Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory Affected: 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; 10.4.6; +9 more |
| CVE-2008-2311 | – | Jul 1 | Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race… Affected: 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; 10.4.6; +9 more |
| CVE-2008-2310 | – | Jul 1 | Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application… Affected: through 10.5.3; 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; +9 more |
| CVE-2008-2309 | – | Jul 1 | Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file,… Affected: 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; 10.4.6; +9 more |
| CVE-2008-2314 | – | Jul 1 | Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2)… Affected: 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; 10.4.6; +9 more |
| CVE-2008-2308 | – | Jul 1 | Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory… Affected: 10.4.1; 10.4.2; 10.4.3; 10.4.4; 10.4.5; 10.4.6; +5 more |
| CVE-2008-1573 | – | Jun 2 | The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or… Affected: through 10.5.2; 10.4.11; 10.5; 10.5.1 |
| CVE-2008-1572 | – | Jun 2 | Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized… Affected: 10.4.11 |
| CVE-2008-1571 | – | Jun 2 | Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal… Affected: 10.4.11 |
| CVE-2008-1036 | – | Jun 2 | The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1032 | – | Jun 2 | Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an (1) Automator, (2) Help, (3)… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1031 | – | Jun 2 | CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document, related… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1030 | – | Jun 2 | Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1027 | – | Jun 2 | Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1028 | – | Jun 2 | Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.4.11 |
| CVE-2008-1579 | – | Jun 2 | Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1578 | – | Jun 2 | The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1577 | – | Jun 2 | Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1575 | – | Jun 2 | Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a… Affected: 10.5; 10.5.1; 10.5.2 |
| CVE-2008-1574 | – | Jun 2 | Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.4.11; 10.5; 10.5.1; 10.5.2 |
| CVE-2008-0054 | – | Mar 18 | Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the NSSelectorFromString API, which causes… Affected: 10.4.11 |
| CVE-2008-1000 | – | Mar 18 | Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via ".."… Affected: 10.5.2 |
| CVE-2008-0999 | – | Mar 18 | Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer… Affected: 10.5.2 |
The 500 most important CVEs for this product (exploited first, then by severity)