Browse CVEs

MEDIUM 5.0 CVE-2004-1123 Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE requ… Darwin Streaming Server Patch available Fix from $1,6002005-01-10 MEDIUM 5.0 CVE-2004-1199 Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated usin… Safari No fix yet Fix from $1,6002005-01-10 HIGH 10.0 CVE-2004-0090 Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack ve… Mac Os X Patch available Fix from $1,9502004-12-31 HIGH 10.0 CVE-2004-0429 Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have… Mac Os X Patch available Fix from $1,9502004-12-31 HIGH 9.3 CVE-2004-2687EPSS 88% distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary … Xcode after 2.18.3 Fix from $1,9502004-12-31 HIGH 7.2 CVE-2004-0821 The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges. Mac Os X Patch available Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-0825 QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) … Mac Os X Server Patch available Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1832 Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (crash and restart) via a large… Mac Os X Server Mitigation only Fix from $1,6002004-12-31 HIGH 7.5 CVE-2004-0873 Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program. Ichat Patch available Fix from $1,9502004-12-23 HIGH 7.5 CVE-2004-1083 Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a c… Darwin Streaming Server Patch available Fix from $1,9502004-12-03 HIGH 7.5 CVE-2004-1086 Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file. Darwin Streaming Server Patch available Fix from $1,9502004-12-02 HIGH 7.5 CVE-2004-1088 Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authenticatio… Darwin Streaming Server Patch available Fix from $1,9502004-12-02 MEDIUM 5.0 CVE-2004-1084 Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file… Darwin Streaming Server Patch available Fix from $1,6002004-12-02 MEDIUM 5.0 CVE-2004-0743 Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected a… Mac Os X Mitigation only Fix from $1,6002004-11-23 MEDIUM 5.0 CVE-2004-0744 The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via … Mac Os X Mitigation only Fix from $1,6002004-11-23 MEDIUM 5.0 CVE-2004-1121 Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags. Safari Patch available Fix from $1,6002004-11-01 HIGH 7.2 CVE-2004-0822 Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbi… Mac Os X Mitigation only Fix from $1,9502004-09-07 HIGH 10.0 CVE-2004-0513 Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls." Mac Os X after 10.3.4 Fix from $1,9502004-08-18 HIGH 7.5 CVE-2004-0518 Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors. Mac Os X No fix yet Fix from $1,9502004-08-18 HIGH 7.2 CVE-2004-0514 Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups." Mac Os X Patch available Fix from $1,9502004-08-18 HIGH 10.0 CVE-2004-0539 The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote att… Mac Os X Mitigation only Fix from $1,9502004-08-06 HIGH 7.5 CVE-2004-0538 LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary … Mac Os X Mitigation only Fix from $1,9502004-08-06 HIGH 7.5 CVE-2004-0720 Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates we… Safari Mitigation only Fix from $1,9502004-07-27 HIGH 7.6 CVE-2004-0486EPSS 10% HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue th… Mac Os X Patch available Fix from $1,9502004-07-07 HIGH 7.6 CVE-2004-0489EPSS 7% Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code… Mac Os X after 10.3.3 Fix from $1,9502004-07-07 MEDIUM 5.1 CVE-2004-0430EPSS 41% Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packe… Mac Os X after 10.3.3 Fix from $1,6002004-07-07 MEDIUM 5.0 CVE-2004-0485 The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image … Mac Os X Patch available Fix from $1,6002004-07-07 HIGH 7.2 CVE-2004-0382 Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration fil… Mac Os X No fix yet Fix from $1,9502004-05-04 HIGH 7.2 CVE-2004-0383 Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email." Mac Os X No fix yet Fix from $1,9502004-05-04 MEDIUM 5.0 CVE-2004-0428 Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unkn… Mac Os X Patch available Fix from $1,6002004-05-03