Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2004-0112 | 5.0 |
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a
|
15-02-2024 - 20:54 | 23-11-2004 - 05:00 | |
CVE-2004-0079 | 5.0 |
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
|
28-12-2023 - 15:33 | 23-11-2004 - 05:00 | |
CVE-2003-0789 | 10.0 |
mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.
|
23-09-2022 - 15:12 | 03-11-2003 - 05:00 | |
CVE-2003-0542 | 7.2 |
Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9
|
06-06-2021 - 11:15 | 03-11-2003 - 05:00 | |
CVE-2003-0242 | 7.5 |
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
|
09-12-2020 - 15:06 | 09-06-2003 - 04:00 | |
CVE-2004-0383 | 7.2 |
Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."
|
11-07-2017 - 01:30 | 04-05-2004 - 04:00 | |
CVE-2004-0382 | 7.2 |
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.
|
11-07-2017 - 01:30 | 04-05-2004 - 04:00 | |
CVE-2003-1007 | 5.0 |
AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-1006 | 7.2 |
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-1011 | 7.2 |
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-1008 | 4.6 |
Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-1009 | 10.0 |
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remo
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-0913 | 4.6 |
Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
|
11-07-2017 - 01:29 | 01-12-2003 - 05:00 | |
CVE-2003-0975 | 5.0 |
Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
|
11-07-2017 - 01:29 | 15-12-2003 - 05:00 | |
CVE-2003-1010 | 4.6 |
Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors.
|
11-07-2017 - 01:29 | 29-03-2004 - 05:00 | |
CVE-2003-0088 | 7.2 |
TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.
|
11-09-2008 - 00:05 | 03-03-2003 - 05:00 | |
CVE-2003-0049 | 7.5 |
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
|
11-09-2008 - 00:05 | 03-03-2003 - 05:00 | |
CVE-2003-0804 | 5.0 |
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP request
|
10-09-2008 - 19:20 | 17-11-2003 - 05:00 | |
CVE-2003-0883 | 4.6 |
The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
|
05-09-2008 - 20:35 | 03-11-2003 - 05:00 | |
CVE-2003-0882 | 5.0 |
Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
|
05-09-2008 - 20:35 | 03-11-2003 - 05:00 | |
CVE-2003-0880 | 4.6 |
Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
|
05-09-2008 - 20:35 | 03-11-2003 - 05:00 | |
CVE-2003-0878 | 2.1 |
slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
|
05-09-2008 - 20:35 | 03-11-2003 - 05:00 | |
CVE-2003-0881 | 7.5 |
Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.
|
05-09-2008 - 20:35 | 03-11-2003 - 05:00 |