Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-08-19 CVE-2005-2525 CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).
network
low complexity
easy-software-products apple
5.0
2005-08-19 CVE-2005-2523 Unspecified vulnerability in Apple mac OS X and Weblog Server
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
apple
4.3
2005-08-19 CVE-2005-2522 Unspecified vulnerability in Apple mac OS X and Safari
Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.
network
high complexity
apple
5.1
2005-08-19 CVE-2005-2521 Unspecified vulnerability in Apple mac OS X 10.3.9
Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.
local
low complexity
apple
4.6
2005-08-19 CVE-2005-2520 Unspecified vulnerability in Apple mac OS X 10.4/10.4.1/10.4.2
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
local
low complexity
apple
2.1
2005-08-19 CVE-2005-2519 Unspecified vulnerability in Apple mac OS X 10.3.9
slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.
local
low complexity
apple
7.2
2005-08-19 CVE-2005-2518 Unspecified vulnerability in Apple mac OS X 10.3.9/10.4.2
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2517 Unspecified vulnerability in Apple mac OS X and Safari
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.
network
high complexity
apple
2.6
2005-08-19 CVE-2005-2516 Unspecified vulnerability in Apple mac OS X and Safari
Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2515 Unspecified vulnerability in Apple mac OS X 10.4.2
Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required.
local
low complexity
apple
4.6