Vulnerabilities > Apple > MAC OS X > 10.2.2

DATE CVE VULNERABILITY TITLE RISK
2003-06-09 CVE-2003-0242 Unspecified vulnerability in Apple mac OS X
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
network
low complexity
apple
7.5
2003-05-05 CVE-2003-0201 Remote Buffer Overflow vulnerability in Samba 'call_trans2open'
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
network
low complexity
samba samba-tng apple compaq hp sun
critical
10.0
2003-05-05 CVE-2003-0198 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
network
low complexity
apple
6.4
2003-05-05 CVE-2003-0171 Unspecified vulnerability in Apple mac OS X and mac OS X Server
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
local
low complexity
apple
7.2
2003-03-03 CVE-2003-0088 Privilege Escalation vulnerability in Apple MacOS Classic TruBlueEnvironment Environment Variable
TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.
local
low complexity
apple
7.2
2003-03-03 CVE-2003-0049 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
network
low complexity
apple
7.5
2002-12-26 CVE-2002-1383 Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
network
low complexity
easy-software-products apple
critical
10.0
2002-12-26 CVE-2002-1372 Unchecked Return Value vulnerability in multiple products
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
network
low complexity
apple debian CWE-252
7.5
2002-12-26 CVE-2002-1371 filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
network
low complexity
easy-software-products apple
7.5
2002-12-26 CVE-2002-1369 Buffer Overflow vulnerability in CUPS strncat() Function Call
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
network
low complexity
easy-software-products apple
critical
10.0