Vulnerabilities > Apple > MAC OS X Server > 10.6
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-11-10 | CVE-2009-2836 | Race Condition vulnerability in Apple mac OS X and mac OS X Server Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors. | 6.2 |
| 2009-11-10 | CVE-2009-2835 | Improper Input Validation vulnerability in Apple mac OS X and mac OS X Server The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors. | 4.6 |
| 2009-11-10 | CVE-2009-2834 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors. | 4.9 |
| 2009-11-10 | CVE-2009-2832 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X Server Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool." Per: http://support.apple.com/kb/HT3937 "This issue affects Mac OS X Server systems only" | 5.1 |
| 2009-11-10 | CVE-2009-2830 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file. | 6.8 |
| 2009-11-10 | CVE-2009-2825 | Cryptographic Issues vulnerability in Apple mac OS X and mac OS X Server Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. | 4.3 |
| 2009-11-10 | CVE-2009-2823 | Cross-Site Scripting vulnerability in Apple mac OS X and mac OS X Server The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software. | 4.3 |
| 2009-11-10 | CVE-2009-2820 | Cross-Site Scripting vulnerability in Apple mac OS X and mac OS X Server The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues. | 4.3 |
| 2009-11-10 | CVE-2009-2818 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X Server Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack). | 5.0 |
| 2009-11-10 | CVE-2009-2810 | Multiple Security vulnerability in RETIRED: Apple Mac OS X 2009-006 Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message. network apple | 6.8 |