Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.3.4 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0539
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote malicious users to execute arbitrary code.
Apple Mac Os X Server 10.3.4Apple Mac Os X 10.3.4Apple Mac Os X Server 10.2.8Apple Mac Os X 10.2.8
7.5
CVSSv2
CVE-2004-0538
LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow malicious users to execute arbitrary code without warning the user.
Apple Mac Os X 10.2.8Apple Mac Os X 10.3.4Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3.4
7.2
CVSSv2
CVE-2004-0821
The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.
Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5Apple Mac Os X 10.2.8
7.2
CVSSv2
CVE-2004-0822
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3.4Apple Mac Os X 10.2.8Apple Mac Os X Server 10.3.5Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5
2.1
CVSSv2
CVE-2004-0622
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.
Apple Mac Os X 10.3.4Apple Mac Os X 10.4Apple Mac Os X 10.5
4.6
CVSSv2
CVE-2005-0712
Mac OS X prior to 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.
Apple Mac Os X 10.1Apple Mac Os X 10.3.4Apple Mac Os X 10.2
5
CVSSv2
CVE-2004-0925
Postfix on Mac OS X 10.3.x up to and including 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Apple Mac Os X 10.3Apple Mac Os X 10.3.2Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.5Apple Mac Os X 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.4
7.2
CVSSv2
CVE-2005-0125
The "at" commands on Mac OS X 10.3.7 and previous versions do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to b...
Apple Mac Os X Server 10.3.7Apple Mac Os X 10.3.7Apple Mac Os X 10.3.4
7.2
CVSSv2
CVE-2005-0716
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.
Apple Mac Os X 10.3.1Apple Mac Os X 10.3.3Apple Mac Os X 10.3.5Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.6Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X Server 10.3Apple Mac Os X 10.3.2Apple Mac Os X 10.3.4Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.4
4.6
CVSSv2
CVE-2005-0713
The Bluetooth Setup Assistant for Mac OS X prior to 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.
Apple Mac Os X 10.3.5Apple Mac Os X 10.3.7Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.3.6Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook