Vulnerabilities > Apple > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-12-31 | CVE-2003-1413 | Path Traversal vulnerability in Apple products parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages. | 4.3 |
| 2003-12-31 | CVE-2003-1005 | Remote Denial Of Service vulnerability in Apple MacOS X ASN.1 Decoding The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences. | 5.0 |
| 2003-12-15 | CVE-2003-0975 | Unspecified vulnerability in Apple mac OS X, mac OS X Server and Safari Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain. | 5.0 |
| 2003-12-01 | CVE-2003-0913 | Unauthorized Access vulnerability in Apple MacOS X Terminal Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access." | 4.6 |
| 2003-11-17 | CVE-2003-0804 | The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests. | 5.0 |
| 2003-11-03 | CVE-2003-0895 | Buffer Overrun vulnerability in MacOS X Long Argv Value Kernel Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]). | 4.6 |
| 2003-11-03 | CVE-2003-0883 | Local Security vulnerability in Apple mac OS X 10.3 The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system. | 4.6 |
| 2003-11-03 | CVE-2003-0882 | Remote Security vulnerability in Mac OS X Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet. | 5.0 |
| 2003-11-03 | CVE-2003-0880 | Local Security vulnerability in Mac OS X Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences. | 4.6 |
| 2003-11-03 | CVE-2003-0877 | Symbolic Link vulnerability in Apple Mac OS X Core File Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory. | 4.6 |