Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.5.3 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2007-6276
The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 prior to 10.5.4 allows remote malicious users to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.
Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.5.1
7.2
CVSSv2
CVE-2008-3609
The kernel in Apple Mac OS X 10.5 up to and including 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3
7.6
CVSSv2
CVE-2008-3610
Race condition in Login Window in Apple Mac OS X 10.5 up to and including 10.5.4, when a blank-password account is enabled, allows malicious users to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by ...
Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2
5
CVSSv2
CVE-2008-3617
Remote Management and Screen Sharing in Apple Mac OS X 10.5 up to and including 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for malicious users to guess passwords that th...
Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5.4Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5
4.3
CVSSv2
CVE-2008-3622
Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 up to and including 10.5.4 allows remote malicious users to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection.&quo...
Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3
5
CVSSv2
CVE-2008-2331
Finder in Apple Mac OS X 10.5 up to and including 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intend...
Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5
1.9
CVSSv2
CVE-2008-2329
Directory Services in Apple Mac OS X 10.5 up to and including 10.5.4, when Active Directory is used, allows malicious users to enumerate user names via wildcard characters in the Login Window.
Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2
2.1
CVSSv2
CVE-2008-3619
Time Machine in Apple Mac OS X 10.5 up to and including 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.
Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5.4
9.3
CVSSv2
CVE-2008-3621
VideoConference in Apple Mac OS X 10.4.11 and 10.5 up to and including 10.5.4 allows remote malicious users to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media.
Apple Mac Os X Server 10.4.11Apple Mac Os X 10.4.11Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3
4.3
CVSSv2
CVE-2009-0144
CFNetwork in Apple Mac OS X 10.5 prior to 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote malicious users to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.
Apple Mac Os X 10.5.5Apple Mac Os X 10.5.6Apple Mac Os X Server 10.5.4Apple Mac Os X 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5Apple Mac Os X 10.5.2Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook