Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.5.2 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2007-6276
The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 prior to 10.5.4 allows remote malicious users to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.
Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.5.1
7.2
CVSSv2
CVE-2008-3609
The kernel in Apple Mac OS X 10.5 up to and including 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3
7.6
CVSSv2
CVE-2008-3610
Race condition in Login Window in Apple Mac OS X 10.5 up to and including 10.5.4, when a blank-password account is enabled, allows malicious users to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by ...
Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2
5
CVSSv2
CVE-2008-3617
Remote Management and Screen Sharing in Apple Mac OS X 10.5 up to and including 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for malicious users to guess passwords that th...
Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5.4Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5
4.3
CVSSv2
CVE-2008-3622
Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 up to and including 10.5.4 allows remote malicious users to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection.&quo...
Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3
5
CVSSv2
CVE-2008-2331
Finder in Apple Mac OS X 10.5 up to and including 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intend...
Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5
1.9
CVSSv2
CVE-2008-2329
Directory Services in Apple Mac OS X 10.5 up to and including 10.5.4, when Active Directory is used, allows malicious users to enumerate user names via wildcard characters in the Login Window.
Apple Mac Os X 10.5Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5.2
2.1
CVSSv2
CVE-2008-3619
Time Machine in Apple Mac OS X 10.5 up to and including 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.
Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5.3Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X Server 10.5.4
4.3
CVSSv2
CVE-2008-1036
The International Components for Unicode (ICU) library in Apple Mac OS X prior to 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote malicious users to cond...
Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X Server 10.4.11Apple Mac Os X 10.4.11Apple Mac Os X Server 10.5.2Redhat Enterprise Linux 5
9.3
CVSSv2
CVE-2008-3621
VideoConference in Apple Mac OS X 10.4.11 and 10.5 up to and including 10.5.4 allows remote malicious users to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media.
Apple Mac Os X Server 10.4.11Apple Mac Os X 10.4.11Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook