Vulnerabilities > Apple > Medium

DATE CVE VULNERABILITY TITLE RISK
2003-11-03 CVE-2003-0882 Remote Security vulnerability in Mac OS X
Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
network
low complexity
apple
5.0
2003-11-03 CVE-2003-0880 Local Security vulnerability in Mac OS X
Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
local
low complexity
apple
4.6
2003-11-03 CVE-2003-0877 Symbolic Link vulnerability in Apple Mac OS X Core File
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
local
low complexity
apple
4.6
2003-08-27 CVE-2003-0425 Unspecified vulnerability in Apple Darwin Streaming Server 4.1.3
Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ...
network
low complexity
apple
5.0
2003-08-27 CVE-2003-0424 Unspecified vulnerability in Apple Darwin Streaming Server 4.1.3
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or .
network
low complexity
apple
5.0
2003-08-27 CVE-2003-0423 Unspecified vulnerability in Apple Darwin Streaming Server 4.1.3
parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter.
network
low complexity
apple
5.0
2003-08-27 CVE-2003-0422 Unspecified vulnerability in Apple Darwin Streaming Server 4.1.3
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.cgi that does not contain the required parameters.
network
low complexity
apple
5.0
2003-08-18 CVE-2003-0518 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
local
low complexity
apple
4.6
2003-07-24 CVE-2003-0379 Unspecified vulnerability in Apple AFP Server
Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files.
network
low complexity
apple
5.0
2003-06-13 CVE-2003-0420 Unspecified vulnerability in Apple mac OS X Server 10.2.6
Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.
local
low complexity
apple
4.6