MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0037 | 8.8 | Jan 20 | Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.5.8; 10.6.2 |
| CVE-2008-3637 | 8.8 | Sep 26 | The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to… Affected: 10.4.11; 10.5.4; 10.5.5 |
| CVE-2006-5051 | 8.1 | Sep 27 | Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is… Affected: before 10.3.9; 10.4 through 10.4.8 |
| CVE-2010-1821 | 7.8 | Apr 13 | Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-1816 | 7.8 | Apr 13 | Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3 |
| CVE-2010-0036 | 7.8 | Jan 20 | Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.5.8; 10.6.2 |
| CVE-2016-1777 | 7.5 | Mar 24 | Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified… Affected: through 5.0.15 |
| CVE-2011-1755 | 7.5 | Jun 21 | jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a… Affected: before 10.6.8; 10.7.0 before 10.7.2 |
| CVE-2010-0302 | 7.5 | Mar 5 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4,… Affected: before 10.5.8; 10.6.0 before 10.6.4 |
| CVE-2009-3553 | 7.5 | Nov 20 | Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and… Affected: before 10.5.8; 10.6.0 before 10.6.2 |
| CVE-2009-0949 | 7.5 | Jun 9 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of… Affected: 10.0.0 before 10.4.11; 10.5.0 before 10.5.8 |
| CVE-2009-0152 | 7.5 | May 13 | iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting,… Affected: 10.5.0 before 10.5.7 |
| CVE-2008-5183 | 7.5 | Nov 21 | cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which… Affected: before 10.5.6 |
| CVE-2008-0063 | 7.5 | Mar 19 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote… Affected: before 10.4.11; 10.5.0 before 10.5.2 |
| CVE-2007-0897 | 7.5 | Feb 16 | Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor… Affected: before 10.4.11 |
| CVE-2006-4095 | 7.5 | Sep 6 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple… Affected: before 10.3.9; 10.4.0 before 10.4.9 |
| CVE-2004-1083 | 7.5 | Dec 3 | Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which… Affected: 10.2; 10.2.1; 10.2.2; 10.2.3; 10.2.4; 10.2.5; +10 more |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 10.3.3 |
Showing 18
The 500 most important CVEs for this product (exploited first, then by severity)