Vulnerabilities > Apple > MAC OS X > 10.2.1

DATE CVE VULNERABILITY TITLE RISK
2003-11-03 CVE-2003-0895 Buffer Overrun vulnerability in MacOS X Long Argv Value Kernel
Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0882 Remote Security vulnerability in Mac OS X
Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
network
low complexity
apple
5.0
2003-11-03 CVE-2003-0881 Remote Security vulnerability in Mac OS X
Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.
network
low complexity
apple
7.5
2003-11-03 CVE-2003-0880 Local Security vulnerability in Mac OS X
Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0878 Local Security vulnerability in Mac OS X
slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
local
low complexity
apple
2.1
2003-11-03 CVE-2003-0877 Symbolic Link vulnerability in Apple Mac OS X Core File
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0876 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
local
low complexity
apple
2.1
2003-10-06 CVE-2003-0694 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
network
low complexity
sendmail sgi apple compaq freebsd gentoo hp ibm netbsd sun turbolinux
critical
10.0
2003-10-06 CVE-2003-0681 Buffer Overflow vulnerability in Sendmail Ruleset Parsing
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
network
low complexity
sendmail apple gentoo hp ibm netbsd openbsd turbolinux
7.5
2003-08-18 CVE-2003-0518 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
local
low complexity
apple
4.6