Vulnerabilities > Apple > MAC OS X Server > High

DATE CVE VULNERABILITY TITLE RISK
2004-03-29 CVE-2003-0601 Unspecified vulnerability in Apple mac OS X Server
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
network
low complexity
apple
7.5
2004-03-15 CVE-2004-0167 Remote vulnerability in Multiple Apple Mac OS X Local And
DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.
network
low complexity
apple
7.5
2003-11-03 CVE-2003-0871 Apple Quicktime Java vulnerability in Apple Mac OS X 10.3
Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."
network
low complexity
apple
7.5
2003-10-06 CVE-2003-0681 Buffer Overflow vulnerability in Sendmail Ruleset Parsing
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
network
low complexity
sendmail apple gentoo hp ibm netbsd openbsd turbolinux
7.5
2003-05-05 CVE-2003-0171 Unspecified vulnerability in Apple mac OS X and mac OS X Server
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
local
low complexity
apple
7.2
2003-03-03 CVE-2003-0049 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
network
low complexity
apple
7.5