Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.3.5 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2004-0821
The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.
Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5Apple Mac Os X 10.2.8
7.2
CVSSv2
CVE-2004-0822
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3.4Apple Mac Os X 10.2.8Apple Mac Os X Server 10.3.5Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5
5
CVSSv2
CVE-2004-0925
Postfix on Mac OS X 10.3.x up to and including 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Apple Mac Os X 10.3Apple Mac Os X 10.3.2Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.5Apple Mac Os X 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.4
7.2
CVSSv2
CVE-2005-0716
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.
Apple Mac Os X 10.3.1Apple Mac Os X 10.3.3Apple Mac Os X 10.3.5Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.6Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X Server 10.3Apple Mac Os X 10.3.2Apple Mac Os X 10.3.4Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.4
4.6
CVSSv2
CVE-2005-0713
The Bluetooth Setup Assistant for Mac OS X prior to 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.
Apple Mac Os X 10.3.5Apple Mac Os X 10.3.7Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.3.6Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.6
2.1
CVSSv2
CVE-2005-0715
AFP Server in Mac OS X prior to 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.
Apple Mac Os X 10.3.3Apple Mac Os X 10.3.5Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.5Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.7Apple Mac Os X 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X 10.3.4Apple Mac Os X 10.3.6Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.4
5
CVSSv2
CVE-2004-0825
QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote malicious users to cause a denial of service (application deadlock) via a certain sequence of operations.
Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.2.8
2.1
CVSSv2
CVE-2004-0824
PPPDialer for Mac OS X 10.2.8 up to and including 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.
Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.2.8Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5
2.1
CVSSv2
CVE-2005-0975
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions prior to 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.
Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.7Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Opendarwin Darwin Kernel 7.1Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5
5
CVSSv2
CVE-2006-4407
The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest shared cipher, which causes Secure Transport to user a weaker cipher that makes it easier for remote malicious users to decrypt traffic.
Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook