Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2003-06-16 CVE-2003-0370 Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
network
low complexity
apple kde redhat turbolinux
7.5
2003-06-16 CVE-2003-0270 Unspecified vulnerability in Apple 802.11N 7.3.1
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
network
high complexity
apple
7.6
2003-06-13 CVE-2003-0420 Unspecified vulnerability in Apple mac OS X Server 10.2.6
Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.
local
low complexity
apple
4.6
2003-06-09 CVE-2003-0355 Remote Security vulnerability in Konqueror Embedded
Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.
network
low complexity
apple kde
5.0
2003-06-09 CVE-2003-0242 Unspecified vulnerability in Apple mac OS X
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
network
low complexity
apple
7.5
2003-05-05 CVE-2003-0201 Remote Buffer Overflow vulnerability in Samba 'call_trans2open'
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
network
low complexity
samba samba-tng apple compaq hp sun
critical
10.0
2003-05-05 CVE-2003-0198 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
network
low complexity
apple
6.4
2003-05-05 CVE-2003-0171 Unspecified vulnerability in Apple mac OS X and mac OS X Server
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
local
low complexity
apple
7.2
2003-04-02 CVE-2003-0168 Unspecified vulnerability in Apple Quicktime 5.0/6.0
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
network
low complexity
apple
7.5
2003-03-07 CVE-2003-0055 Buffer Overrun vulnerability in Apple Quicktime/Darwin MP3 Broadcaster Filename
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename.
network
low complexity
apple
7.5