Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple apple remote desktop 3.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2013-5136
Apple Remote Desktop prior to 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote malicious users to obtain sensitive information in opportunistic circumstances b...
Apple Apple Remote Desktop 3.3.2Apple Apple Remote Desktop 3.4Apple Apple Remote Desktop 3.5Apple Apple Remote Desktop 3.5.1Apple Apple Remote Desktop 3.0.0Apple Apple Remote Desktop 3.1Apple Apple Remote Desktop 3.2Apple Apple Remote Desktop 3.5.4Apple Apple Remote Desktop 3.2.2Apple Apple Remote Desktop 3.3.1Apple Apple Remote Desktop 3.5.2Apple Apple Remote Desktop 3.6Apple Apple Remote DesktopApple Apple Remote Desktop 3.2.1Apple Apple Remote Desktop 3.3Apple Apple Remote Desktop 3.5.3Apple Apple Remote Desktop 3.6.1
7.5
CVSSv2
CVE-2013-5135
Format string vulnerability in Screen Sharing Server in Apple Mac OS X prior to 10.9 and Apple Remote Desktop prior to 3.5.4 allows remote malicious users to execute arbitrary code via format string specifiers in a VNC username.
Apple Apple Remote Desktop 3.0.0Apple Apple Remote Desktop 3.1Apple Apple Remote Desktop 3.2Apple Apple Remote Desktop 3.3.2Apple Apple Remote Desktop 3.4Apple Apple Remote Desktop 3.5Apple Apple Remote Desktop 3.5.1Apple Apple Remote Desktop 3.2.2Apple Apple Remote Desktop 3.3.1Apple Apple Remote Desktop 3.5.2Apple Apple Remote Desktop 3.2.1Apple Apple Remote Desktop 3.3Apple Apple Remote DesktopApple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.8.4Apple Mac Os X 10.8.5Apple Mac Os X 10.8.1Apple Mac Os XApple Mac Os X 10.8.0
7.2
CVSSv2
CVE-2006-4413
Apple Remote Desktop prior to 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.
Apple Remote Desktop
4.3
CVSSv2
CVE-2008-0063
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote malicious users to obtain sensitive information, aka "Uninitialized stack values."
Mit Kerberos 5Apple Mac Os XApple Mac Os X ServerOpensuse Opensuse 10.2Opensuse Opensuse 10.3Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 10Suse Linux 10.1Debian Debian Linux 3.1Debian Debian Linux 4.0Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 6.06Fedoraproject Fedora 8Fedoraproject Fedora 7
9.3
CVSSv2
CVE-2012-4655
The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...
Cisco Secure Desktop 3.4Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.2Cisco Secure Desktop 3.6Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.6.181Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.6.185Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.6.4021Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.6.1001Cisco Secure Desktop 3.3Cisco Secure Desktop 3.6.2002
4.3
CVSSv2
CVE-2012-2495
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...
Cisco Anyconnect Secure Mobility Client 3.0Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.4Cisco Secure Desktop 3.3Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.2Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.5.1077Cisco Secure Desktop
7.5
CVSSv2
CVE-2016-0718
Expat allows context-dependent malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Mozilla FirefoxApple Mac Os XSuse Linux Enterprise Server 11Suse Studio Onsite 1.3Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Debuginfo 11Opensuse Leap 42.1Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Server 12Suse Linux Enterprise Desktop 12Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Libexpat Project LibexpatDebian Debian Linux 8.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Mcafee Policy AuditorPython Python
5
CVSSv2
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5
CVSSv2
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5
CVSSv2
CVE-2004-0081
OpenSSL 0.9.6 prior to 0.9.6d does not properly handle unknown message types, which allows remote malicious users to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.2Symantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Hp Aaa ServerCisco Ciscoworks Common Management Foundation 2.1Cisco Ciscoworks Common Services 2.2Avaya Sg208 4.4Avaya Sg5 4.2Avaya Sg5 4.3Freebsd Freebsd 5.1Hp Hp-ux 8.05Openbsd Openbsd 3.3Redhat Linux 8.0Sco Openserver 5.0.6Avaya Sg203 4.4Avaya Sg208Freebsd Freebsd 4.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook