| Max CVSS | 10.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4412 | 6.8 |
WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to execute arbitrary code via a crafted HTML file, which accesses previously deallocated objects.
|
20-07-2017 - 01:33 | 30-11-2006 - 16:28 | |
| CVE-2006-4406 | 7.5 |
Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote attackers to execute arbitrary code via unspecified vectors.
|
20-07-2017 - 01:33 | 30-11-2006 - 16:28 | |
| CVE-2006-4403 | 4.0 |
The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user name, which allows remote attackers to cause a denial of service (crash) and enumerate valid usernames.
|
20-07-2017 - 01:33 | 30-11-2006 - 16:28 | |
| CVE-2006-4402 | 5.1 |
Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DS_Store files.
|
20-07-2017 - 01:33 | 30-11-2006 - 16:28 | |
| CVE-2006-4404 | 10.0 |
The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with Admin credentials, does not authenticate the user before installing certain software requiring system privileges.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4396 | 4.6 |
The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4401 | 5.1 |
Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary FTP commands via a crafted FTP URI.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4398 | 7.2 |
Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4408 | 5.0 |
The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to cause a denial of service (resource consumption) via certain public key values in an X.509 certificate that requires extra resources during signature verification
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4410 | 7.5 |
The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not properly search certificate revocation lists (CRL), which allows remote attackers to access systems by using revoked certificates.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4411 | 7.2 |
The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing commands, which allows local users to gain privileges via unspecified vectors.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4409 | 5.0 |
The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that h
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4407 | 5.0 |
The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest shared cipher, which causes Secure Transport to user a weaker cipher that makes it easier for remote attackers
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 | |
| CVE-2006-4400 | 5.1 |
Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute arbitrary code via crafted font files.
|
08-03-2011 - 02:40 | 30-11-2006 - 16:28 |