Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x server 10.1 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2003-0171
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Apple Mac Os X 10.0.2Apple Mac Os X 10.0.4Apple Mac Os X 10.1.4Apple Mac Os X 10.2Apple Mac Os X 10.2.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.3Apple Mac Os X 10.1Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.0Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X Server 10.0Apple Mac Os X Server 10.2Apple Mac Os X 10.0.1Apple Mac Os X 10.0.3Apple Mac Os X 10.1.5Apple Mac Os X 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.4
2.1
CVSSv2
CVE-2003-0876
Finder in Mac OS X 10.2.8 and previous versions sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
Apple Mac Os X 10.0Apple Mac Os X 10.0.1Apple Mac Os X 10.1.4Apple Mac Os X 10.1.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.6Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.3Apple Mac Os X 10.0.2Apple Mac Os X 10.0.3Apple Mac Os X 10.0.4Apple Mac Os X 10.2Apple Mac Os X 10.2.1Apple Mac Os X 10.2.8Apple Mac Os X Server 10.0
5
CVSSv2
CVE-2007-1863
cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote malicious users to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) m...
Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.1.1Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.1.2Apple Mac Os X Server 10.3.7Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.3
4.3
CVSSv2
CVE-2009-2820
The web interface in CUPS prior to 1.4.2, as used on Apple Mac OS X prior to 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote malicious users to conduct cross-site scripting (XSS) attacks and HTTP response splitting...
Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.2.0Apple Mac Os X 10.2.1Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5
4.9
CVSSv2
CVE-2009-2834
IOKit in Apple Mac OS X prior to 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.3.8Apple Mac Os X 10.3.1Apple Mac Os X 10.2.0Apple Mac Os X 10.2.2Apple Mac Os X 10.2Apple Mac Os X 10.1Apple Mac Os X 10.1.5Apple Mac Os X 10.4.0Apple Mac Os X 10.4.5Apple Mac Os X 10.4.7Apple Mac Os X 10.0.2Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.9Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7
5.4
CVSSv2
CVE-2009-2808
Help Viewer in Apple Mac OS X prior to 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle malicious users to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.5.8Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.1.0Apple Mac Os X 10.1
4.3
CVSSv2
CVE-2009-2823
The Apache HTTP Server in Apple Mac OS X prior to 10.6.2 enables the HTTP TRACE method, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified web client software.
Apple Mac Os X 10.5.5Apple Mac Os X 10.5.4Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.1.1Apple Mac Os X 10.1.4Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0
4.3
CVSSv2
CVE-2009-2825
Certificate Assistant in Apple Mac OS X prior to 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL servers vi...
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.1.2Apple Mac Os X 10.1.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8
4.6
CVSSv2
CVE-2009-2835
The kernel in Apple Mac OS X prior to 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.1.3Apple Mac Os X 10.1.5Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.6Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.2.2
7.2
CVSSv2
CVE-2003-1006
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 up to and including 10.3.2 and Apple Mac OS X Server 10.0 up to and including 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.
Apple Mac Os X 10.0.4Apple Mac Os X 10.1Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X Server 10.0Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.6Apple Mac Os X 10.0.2Apple Mac Os X 10.0.3Apple Mac Os X 10.1.5Apple Mac Os X 10.2Apple Mac Os X 10.2.8Apple Mac Os X 10.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook