| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1083 | 5.0 |
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning wit
|
08-02-2024 - 02:09 | 03-12-2004 - 05:00 | |
| CVE-2004-1081 | 2.1 |
The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1089 | 4.6 |
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1086 | 7.5 |
Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1087 | 2.1 |
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1085 | 2.1 |
Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1084 | 5.0 |
Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 | |
| CVE-2004-1088 | 7.5 |
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
|
11-07-2017 - 01:30 | 02-12-2004 - 05:00 |