10.4.7

DATE	CVE	VULNERABILITY TITLE	RISK
2007-03-13	CVE-2007-0731	Applications Multiple vulnerability in Apple Mac OS X Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL. network apple critical	9.3
2007-03-13	CVE-2007-0730	Applications Multiple vulnerability in Apple Mac OS X Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently validate authentication credentials, which allows remote attackers to bypass authentication and modify system configuration. network apple	6.8
2007-03-13	CVE-2007-0728	Applications Multiple vulnerability in Apple Mac OS X Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files insecurely while initializing a USB printer, which allows local users to create or overwrite arbitrary files. local apple	4.4
2007-03-13	CVE-2007-0726	Applications Multiple vulnerability in Apple Mac OS X The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys. network low complexity apple	5.0
2007-03-13	CVE-2007-0724	Applications Multiple vulnerability in Apple Mac OS X The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console. local apple	6.9
2007-03-13	CVE-2007-0723	Applications Multiple vulnerability in Apple Mac OS X Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors. network apple	8.5
2007-03-13	CVE-2007-0722	Applications Multiple vulnerability in Apple Mac OS X Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted AppleSingleEncoding disk image. network apple	6.8
2007-03-13	CVE-2007-0721	Applications Multiple vulnerability in Apple Mac OS X Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted compressed disk image that triggers memory corruption. network apple	6.8
2007-03-13	CVE-2007-0720	The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted. network low complexity cups apple	5.0
2007-03-13	CVE-2007-0719	Applications Multiple vulnerability in Apple Mac OS X Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via an image with a crafted ColorSync profile. network apple	6.8