Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x server 10.1.0 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv2
CVE-2009-2808
Help Viewer in Apple Mac OS X prior to 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle malicious users to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.5.8Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.1.0Apple Mac Os X 10.1
4.3
CVSSv2
CVE-2009-2825
Certificate Assistant in Apple Mac OS X prior to 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL servers vi...
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.1.2Apple Mac Os X 10.1.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8
4.9
CVSSv2
CVE-2009-2834
IOKit in Apple Mac OS X prior to 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.3.8Apple Mac Os X 10.3.1Apple Mac Os X 10.2.0Apple Mac Os X 10.2.2Apple Mac Os X 10.2Apple Mac Os X 10.1Apple Mac Os X 10.1.5Apple Mac Os X 10.4.0Apple Mac Os X 10.4.5Apple Mac Os X 10.4.7Apple Mac Os X 10.0.2Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.9Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7
4.3
CVSSv2
CVE-2009-2820
The web interface in CUPS prior to 1.4.2, as used on Apple Mac OS X prior to 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote malicious users to conduct cross-site scripting (XSS) attacks and HTTP response splitting...
Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.2.0Apple Mac Os X 10.2.1Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5
4.3
CVSSv2
CVE-2009-2823
The Apache HTTP Server in Apple Mac OS X prior to 10.6.2 enables the HTTP TRACE method, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified web client software.
Apple Mac Os X 10.5.5Apple Mac Os X 10.5.4Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.1.1Apple Mac Os X 10.1.4Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0
4.6
CVSSv2
CVE-2009-2835
The kernel in Apple Mac OS X prior to 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.1.3Apple Mac Os X 10.1.5Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.6Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.2.2
2.6
CVSSv2
CVE-2011-3218
The "Save for Web" selection in QuickTime Player in Apple Mac OS X up to and including 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle malicious users to conduct cross-site scripting (XSS) attacks by spoofing the ...
Apple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.0.1Apple Mac Os X 10.6.1Apple Mac Os X 10.6.0Apple Mac Os X 10.5.1
4.6
CVSSv2
CVE-2011-3214
IOGraphics in Apple Mac OS X up to and including 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate malicious users to bypass the password requirement via unspecified vectors.
Apple Mac Os X 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.0.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.6.6Apple Mac Os X 10.6.7Apple Mac Os X Server 10.5.8Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.0Apple Mac Os X Server 10.5
6.8
CVSSv2
CVE-2011-3217
MediaKit in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image.
Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1
2.6
CVSSv2
CVE-2011-3224
The User Documentation component in Apple Mac OS X up to and including 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle malicious users to execute arbitrary code by spoofing the http server.
Apple Mac Os X 10.6.7Apple Mac Os X 10.6.6Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.0Apple Mac Os X Server 10.2Apple Mac Os X Server 10.0.4Apple Mac Os X Server 10.0.3Apple Mac Os X 10.6.3Apple Mac Os X 10.6.2Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.4.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook