Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2005-11-01 CVE-2005-2752 Information Exposure vulnerability in Apple mac OS X and mac OS X Server
An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406.
local
low complexity
apple CWE-200
2.1
2005-11-01 CVE-2005-2751 Local vulnerability in Apple Mac OS X Security Update 2005-10-31
memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group.
local
low complexity
apple
2.1
2005-11-01 CVE-2005-2750 Local vulnerability in Apple mac OS X Server 10.4.2
Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed.
local
low complexity
apple
2.1
2005-11-01 CVE-2005-2749 Local vulnerability in Apple Mac OS X Security Update 2005-10-31
Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information.
local
low complexity
apple
2.1
2005-11-01 CVE-2005-2739 Local vulnerability in Apple Mac OS X Security Update 2005-10-31
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
local
low complexity
apple
2.1
2005-10-26 CVE-2005-2746 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages.
network
low complexity
apple
5.0
2005-10-26 CVE-2005-2745 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, which might allow remote attackers to obtain sensitive information.
network
low complexity
apple
5.0
2005-10-26 CVE-2005-2743 Unspecified vulnerability in Apple mac OS X, mac OS X Server and Quicktime
The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code.
network
low complexity
apple
7.5
2005-10-26 CVE-2005-2742 Unspecified vulnerability in Apple mac OS X and mac OS X Server
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.
local
low complexity
apple
4.6
2005-10-26 CVE-2005-2741 Permissions, Privileges, and Access Controls vulnerability in multiple products
Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators.
local
low complexity
apple perry-kiehtreiber CWE-264
7.2