Vulnerabilities > Apple > Low

DATE CVE VULNERABILITY TITLE RISK
2004-12-02 CVE-2004-1081 Remote And Local vulnerability in Apple Mac OS X
The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
local
low complexity
apple
2.1
2004-12-02 CVE-2004-1085 Remote And Local vulnerability in Apple Mac OS X
Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.
local
low complexity
apple
2.1
2004-12-02 CVE-2004-1087 Remote And Local vulnerability in Apple Mac OS X
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.
local
low complexity
apple
2.1
2004-03-03 CVE-2004-0087 Unspecified vulnerability in Apple mac OS X 10.2.8/10.3.2
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088.
local
low complexity
apple
2.1
2004-03-03 CVE-2004-0088 Unspecified vulnerability in Apple mac OS X 10.2.8
The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087.
local
low complexity
apple
2.1
2003-11-17 CVE-2001-1412 Unspecified vulnerability in Apple mac OS X 10.4.9
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
local
low complexity
apple
2.1
2003-11-03 CVE-2003-0876 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
local
low complexity
apple
2.1
2003-11-03 CVE-2003-0878 Local Security vulnerability in Mac OS X
slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
local
low complexity
apple
2.1
2002-12-11 CVE-2002-1270 Local Security vulnerability in Apple mac OS X 10.2.2
Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.
local
low complexity
apple
2.1
2001-12-31 CVE-2001-1565 Authentication Credentials Disclosure vulnerability in Apple Mac OS X PPP
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
local
low complexity
apple
2.1