Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x server 10.4.7 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2007-0747
load_webdav in Apple Mac OS X 10.3.9 up to and including 10.4.9 does not properly clean the environment when mounting a WebDAV filesystem, which allows local users to gain privileges by setting unspecified environment variables.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.8Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.9Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X 10.3.9Apple Mac Os X 10.4Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.6
4.6
CVSSv2
CVE-2008-2308
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and previous versions on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount i...
Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.4.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X 10.4.11Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X 10.5Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.5.1Apple Mac Os X Server 10.4.1
6.8
CVSSv2
CVE-2008-2310
Format string vulnerability in c++filt in Apple Mac OS X 10.5 prior to 10.5.4 allows user-assisted malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted string in (1) C++ or (2) Java source code.
Apple Mac Os X 10.4.11Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X 10.5Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.5.2Apple Mac Os XApple Mac Os X 10.4.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7
6.8
CVSSv2
CVE-2008-2309
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X prior to 10.5.4 allows user-assisted remote malicious users to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a "potentially unsafe" warning message in (a) the Download Va...
Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.5.3Apple Mac Os X Server 10.4.1Apple Mac Os X 10.4.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.5Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.8Apple Mac Os X 10.4.11Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X 10.5Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2
4.6
CVSSv2
CVE-2008-2313
Apple Mac OS X prior to 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X 10.4.1Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.9
4.4
CVSSv2
CVE-2008-2314
Dock in Apple Mac OS X 10.5 prior to 10.5.4, when Exposé hot corners is enabled, allows physically proximate malicious users to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.9Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.5
7.6
CVSSv2
CVE-2008-2311
Launch Services in Apple Mac OS X prior to 10.5, when Open Safe Files is enabled, allows remote malicious users to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file.
Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.4.11Apple Mac Os X 10.4.2Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.5.3
5
CVSSv2
CVE-2007-2404
CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 prior to 20070731 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged fo...
Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.9Apple Mac Os X 10.4Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4
7.2
CVSSv2
CVE-2007-0753
Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.
Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.9Apple Mac Os X 10.4Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.7Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X 10.3Apple Mac Os X 10.3.7
2.1
CVSSv2
CVE-2007-0751
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command.
Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.9Apple Mac Os X 10.4Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.3Apple Mac Os X Server 10.3.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook