Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2001-09-11 CVE-2001-1446 Unspecified vulnerability in Apple mac OS X
Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories.
network
low complexity
apple
7.5
2001-05-03 CVE-2001-0198 Remote Overflow vulnerability in Apple Quicktime 4.1.2
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
network
high complexity
apple
7.6
2001-02-12 CVE-2001-0102 Unspecified vulnerability in Apple Macos
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
local
low complexity
apple
7.2
2001-02-12 CVE-2001-0068 Unspecified vulnerability in Apple mac OS Runtime for Java 2.2.3
Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter.
network
high complexity
apple
2.6
2000-06-01 CVE-1999-0590 A system does not present an appropriate legal message or warning to a user who is accessing it.
network
low complexity
microsoft linux apple
critical
10.0
2000-04-04 CVE-2000-0299 Unspecified vulnerability in Apple Webobjects 4.5
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
network
low complexity
apple
5.0
1999-12-31 CVE-1999-1102 lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
local
low complexity
sgi apple bsd sun
2.1
1999-12-28 CVE-2000-0041 Unspecified vulnerability in Apple Macos 9.0
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
network
low complexity
apple
5.0
1999-11-01 CVE-1999-1077 Unspecified vulnerability in Apple Macos 9
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
local
low complexity
apple
4.6
1999-10-26 CVE-1999-1076 Unspecified vulnerability in Apple Macos 9
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
local
low complexity
apple
4.6