Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.2.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2004-0922
AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows malicious users to read the ...
Apple Quicktime 5.0.2Apple Quicktime 6.0Apple Quicktime 6.1Apple Quicktime 6.5Apple Quicktime 6.5.1Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.8Apple Mac Os X 10.3.4Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.3Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3
7.5
CVSSv2
CVE-2004-0921
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.
Apple Quicktime 6.1Apple Quicktime 6.5Apple Quicktime 6.5.1Apple Quicktime 6.0Apple Quicktime 5.0.2Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.3.5Apple Mac Os X 10.2Apple Mac Os X 10.2.2Apple Mac Os X 10.3Apple Mac Os X 10.3.2Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7
7.2
CVSSv2
CVE-2003-1006
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 up to and including 10.3.2 and Apple Mac OS X Server 10.0 up to and including 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.
Apple Mac Os X 10.0.4Apple Mac Os X 10.1Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X Server 10.0Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.6Apple Mac Os X 10.0.2Apple Mac Os X 10.0.3Apple Mac Os X 10.1.5Apple Mac Os X 10.2Apple Mac Os X 10.2.8Apple Mac Os X 10.3
5
CVSSv2
CVE-2004-0165
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and previous versions allows remote malicious users to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
Apple Mac Os X 10.1Apple Mac Os X 10.1.1Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X Server 10.1Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X Server 10.1.1Apple Mac Os X Server 10.1.2Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.3.2Apple Mac Os X 10.2Apple Mac Os X 10.2.1
7.2
CVSSv2
CVE-2003-1011
Apple Mac OS X 10.0 up to and including 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
Apple Mac Os X 10.0.4Apple Mac Os X 10.1Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.0.2Apple Mac Os X 10.0.3Apple Mac Os X 10.1.5Apple Mac Os X 10.2Apple Mac Os X 10.2.7Apple Mac Os X 10.2.8Apple Mac Os X 10.0Apple Mac Os X 10.0.1Apple Mac Os X 10.1.3Apple Mac Os X 10.1.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4
4.6
CVSSv2
CVE-2003-0877
Mac OS X prior to 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
Apple Mac Os X 10.0.3Apple Mac Os X 10.0.4Apple Mac Os X 10.2Apple Mac Os X 10.2.1Apple Mac Os X 10.0.1Apple Mac Os X 10.0.2Apple Mac Os X 10.1.4Apple Mac Os X 10.1.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.2.8Apple Mac Os X 10.1Apple Mac Os X 10.1.1Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.0Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5
7.5
CVSSv2
CVE-2004-1088
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote malicious users to send mail without authentication by replaying authentication information.
Apple Darwin Streaming Server 4.1.3Apple Darwin Streaming Server 5.0.1Apple Quicktime Streaming Server 4.1.1Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.4Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X 10.2Apple Mac Os X 10.2.7
4.6
CVSSv2
CVE-2004-1089
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.
Apple Darwin Streaming Server 5.0.1Apple Quicktime Streaming Server 4.1.1Apple Darwin Streaming Server 4.1.3Apple Mac Os X 10.2Apple Mac Os X 10.2.8Apple Mac Os X 10.3Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.3Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.3.6Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4
5
CVSSv2
CVE-2004-1123
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote malicious users to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
Apple Quicktime Streaming Server 4.1.1Apple Darwin Streaming Server 4.1.3Apple Darwin Streaming Server 5.0.1Apple Mac Os X 10.2Apple Mac Os X 10.2.1Apple Mac Os X 10.3Apple Mac Os X 10.3.1Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.2.8
2.1
CVSSv2
CVE-2004-1081
The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
Apple Quicktime Streaming Server 4.1.1Apple Darwin Streaming Server 4.1.3Apple Darwin Streaming Server 5.0.1Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.2.8Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X 10.3.6Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.8Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook