Vulnerabilities > Apple > Low

DATE CVE VULNERABILITY TITLE RISK
2005-05-19 CVE-2005-1472 Unspecified vulnerability in Apple mac OS X 10.4.1
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
local
low complexity
apple
2.1
2005-05-12 CVE-2005-0973 Unspecified vulnerability in Apple mac OS X
Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
local
low complexity
apple
2.1
2005-05-03 CVE-2005-1385 Denial-Of-Service vulnerability in Apple Safari 1.3
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
network
high complexity
apple
2.6
2005-05-03 CVE-2005-1430 Local Security vulnerability in Mac OS X
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users.
local
low complexity
apple
3.6
2005-05-02 CVE-2005-0342 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file.
local
low complexity
apple
2.1
2005-05-02 CVE-2005-0903 Buffer Overflow vulnerability in Apple Quicktime Pictureviewer 6.5.1
Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.
network
high complexity
apple
2.6
2005-05-02 CVE-2005-0975 Local Integer Overflow vulnerability in Darwin Kernel Mach File Parsing
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.
local
low complexity
apple opendarwin
2.1
2005-03-21 CVE-2005-0715 Unspecified vulnerability in Apple mac OS X and mac OS X Server
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.
local
low complexity
apple
2.1
2005-01-27 CVE-2004-0923 Local Password Disclosure vulnerability in CUPS Error_Log
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
local
low complexity
easy-software-products apple
2.1
2004-12-31 CVE-2004-0824 Symbolic Link vulnerability in Apple PPPDialer Insecure Log File Creation
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.
local
low complexity
apple
2.1