MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-1378 | 9.8 | Nov 15 | OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary… Affected: 10.6.0 before 10.6.5 |
| CVE-2010-2941 | 9.8 | Nov 5 | ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of… Affected: before 10.5.8; 10.6.0 through 10.6.4 |
| CVE-2010-0211 | 9.8 | Jul 28 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a… Affected: 10.6.0 before 10.6.5 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: 10.6.0 before 10.6.4 |
| CVE-2009-2422 | 9.8 | Jul 10 | The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that… Affected: 10.6.0 before 10.6.3; 10.5.8 |
| CVE-2008-0599 | 9.8 | May 5 | The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which… Affected: before 10.5.4 |
| CVE-2007-3798 | 9.8 | Jul 16 | Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an… Affected: 10.0.0 before 10.4.11 |
| CVE-2005-1689 | 9.8 | Jul 18 | Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions Affected: before 10.4.2 |
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 10.2.6 |
| CVE-2002-1347 | 9.8 | Dec 18 | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs… Affected: before 10.3.8 |
Showing 10
The 500 most important CVEs for this product (exploited first, then by severity)