Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2003-12-31 CVE-2003-1413 Path Traversal vulnerability in Apple products
parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
network
apple CWE-22
4.3
2003-12-31 CVE-2003-1091 Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.
network
low complexity
apple
7.5
2003-12-31 CVE-2003-1005 Remote Denial Of Service vulnerability in Apple MacOS X ASN.1 Decoding
The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.
network
low complexity
apple
5.0
2003-12-15 CVE-2003-0975 Unspecified vulnerability in Apple mac OS X, mac OS X Server and Safari
Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
network
low complexity
apple
5.0
2003-12-01 CVE-2003-0913 Unauthorized Access vulnerability in Apple MacOS X Terminal
Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
local
low complexity
apple
4.6
2003-11-17 CVE-2003-0804 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
network
low complexity
apple freebsd openbsd
5.0
2003-11-17 CVE-2001-1412 Unspecified vulnerability in Apple mac OS X 10.4.9
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
local
low complexity
apple
2.1
2003-11-17 CVE-2001-1411 Local Security vulnerability in Apple mac OS X 10.4.9
Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
local
low complexity
apple
7.2
2003-11-03 CVE-2003-0895 Buffer Overrun vulnerability in MacOS X Long Argv Value Kernel
Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0883 Local Security vulnerability in Apple mac OS X 10.3
The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
local
low complexity
apple
4.6