Vulnerabilities > Apple > MAC OS X > Medium

DATE CVE VULNERABILITY TITLE RISK
2003-12-01 CVE-2003-0913 Unauthorized Access vulnerability in Apple MacOS X Terminal
Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
local
low complexity
apple
4.6
2003-11-17 CVE-2003-0804 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
network
low complexity
apple freebsd openbsd
5.0
2003-11-03 CVE-2003-0895 Buffer Overrun vulnerability in MacOS X Long Argv Value Kernel
Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0883 Local Security vulnerability in Apple mac OS X 10.3
The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0882 Remote Security vulnerability in Mac OS X
Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
network
low complexity
apple
5.0
2003-11-03 CVE-2003-0880 Local Security vulnerability in Mac OS X
Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0877 Symbolic Link vulnerability in Apple Mac OS X Core File
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
local
low complexity
apple
4.6
2003-08-18 CVE-2003-0518 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
local
low complexity
apple
4.6
2003-05-05 CVE-2003-0198 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
network
low complexity
apple
6.4
2002-12-31 CVE-2002-2326 Cryptographic Issues vulnerability in Apple mac OS X
The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.
network
low complexity
apple CWE-310
5.0