Vulnerabilities > Apple > MAC OS X > 10.4.3

DATE CVE VULNERABILITY TITLE RISK
2007-04-24 CVE-2007-0725 Multiple Security vulnerability in Apple Mac OS X 2007-004
Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through 10.4.9, when running on hardware with the original AirPort wireless card, allows local users to execute arbitrary code by "sending malformed control commands."
local
low complexity
apple
7.2
2007-04-10 CVE-2007-0734 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.
5.4
2007-03-13 CVE-2007-0733 Applications Multiple vulnerability in Apple Mac OS X
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RAW image that triggers memory corruption.
network
apple
critical
9.3
2007-03-13 CVE-2007-0731 Applications Multiple vulnerability in Apple Mac OS X
Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL.
network
apple
critical
9.3
2007-03-13 CVE-2007-0730 Applications Multiple vulnerability in Apple Mac OS X
Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently validate authentication credentials, which allows remote attackers to bypass authentication and modify system configuration.
network
apple
6.8
2007-03-13 CVE-2007-0728 Applications Multiple vulnerability in Apple Mac OS X
Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files insecurely while initializing a USB printer, which allows local users to create or overwrite arbitrary files.
local
apple
4.4
2007-03-13 CVE-2007-0726 Applications Multiple vulnerability in Apple Mac OS X
The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.
network
low complexity
apple
5.0
2007-03-13 CVE-2007-0724 Applications Multiple vulnerability in Apple Mac OS X
The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.
local
apple
6.9
2007-03-13 CVE-2007-0723 Applications Multiple vulnerability in Apple Mac OS X
Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors.
network
apple
8.5
2007-03-13 CVE-2007-0722 Applications Multiple vulnerability in Apple Mac OS X
Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted AppleSingleEncoding disk image.
network
apple
6.8