Vulnerabilities > Apple > MAC OS X > 10.0.2

DATE CVE VULNERABILITY TITLE RISK
2005-05-12 CVE-2005-0971 Unspecified vulnerability in Apple mac OS X
Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
local
low complexity
apple
4.6
2005-05-12 CVE-2005-0969 Unspecified vulnerability in Apple mac OS X
Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.
local
low complexity
apple
4.6
2005-05-03 CVE-2005-1430 Local Security vulnerability in Mac OS X
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users.
local
low complexity
apple
3.6
2005-05-02 CVE-2005-0970 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X
Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
network
high complexity
apple CWE-264
7.6
2005-05-02 CVE-2005-0342 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file.
local
low complexity
apple
2.1
2004-10-07 CVE-2005-0373 Remote And Local vulnerability in Cyrus SASL
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
network
low complexity
cyrus openpkg suse conectiva apple redhat
7.5
2004-08-18 CVE-2004-0513 Security vulnerability in Apple Mac OS X
Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."
network
low complexity
apple
critical
10.0
2004-07-07 CVE-2004-0430 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
network
high complexity
apple
5.1
2004-03-29 CVE-2003-1011 Local Root Privilege Elevation vulnerability in MacOS X
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
local
low complexity
apple
7.2
2004-03-29 CVE-2003-1009 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.
network
low complexity
apple
critical
10.0