Vulnerabilities > Apple > MAC OS X Server > 10.2.2

DATE CVE VULNERABILITY TITLE RISK
2010-03-30 CVE-2010-0525 Cryptographic Issues vulnerability in Apple mac OS X and mac OS X Server
Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail recipient, which might make it easier for remote attackers to obtain sensitive information via a brute-force attack on a weakly encrypted e-mail message.
network
low complexity
apple CWE-310
5.0
2010-03-30 CVE-2010-0521 Improper Authentication vulnerability in Apple mac OS X and mac OS X Server
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.
network
low complexity
apple CWE-287
5.0
2010-03-30 CVE-2010-0513 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0510 Credentials Management vulnerability in Apple mac OS X Server
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
network
low complexity
apple CWE-255
critical
9.0
2010-03-30 CVE-2010-0509 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server
SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.
local
low complexity
apple CWE-264
7.2
2010-03-30 CVE-2010-0508 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors.
network
low complexity
apple
critical
10.0
2010-03-30 CVE-2010-0507 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0505 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0504 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X Server
Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
network
low complexity
apple CWE-119
7.5
2010-03-30 CVE-2010-0503 Resource Management Errors vulnerability in Apple mac OS X Server
Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
network
low complexity
apple CWE-399
6.5