Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2003-0913 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
CVE-2003-0804 3Apple FreebsdOpenbsd 4Freebsd Mac Os XMac Os X Server+1 more Apr 16, 2026 Nov 17, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via...Show more The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.Show less
CVE-2001-1412 1Apple 1Mac Os X Apr 16, 2026 Nov 17, 2003 N/A· v4 N/A· v3 2.1 LOW· v2 nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
CVE-2001-1411 1Apple 1Mac Os X Apr 16, 2026 Nov 17, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
CVE-2003-0895 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long...Show more Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).Show less
CVE-2003-0883 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
CVE-2003-0882 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
CVE-2003-0881 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the passwor...Show more Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.Show less
CVE-2003-0880 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
CVE-2003-0878 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 2.1 LOW· v2 slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
CVE-2003-0877 1Apple 1Mac Os X Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
CVE-2003-0876 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 2.1 LOW· v2 Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have l...Show more Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.Show less
CVE-2003-0871 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 3, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."
CVE-2003-0694 11Apple CompaqFreebsd+8 more 18Advanced Message Server AixFreebsd+15 more Apr 16, 2026 Oct 6, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVE-2003-0681 8Apple GentooHp+5 more 14Advanced Message Server AixHp Ux+11 more Apr 16, 2026 Oct 6, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
CVE-2003-0502 1Apple 1Darwin Streaming Server Apr 16, 2026 Aug 27, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220...Show more Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.Show less
CVE-2003-0466 7Apple FreebsdNetbsd+4 more 8Freebsd Mac Os XMac Os X Server+5 more Apr 16, 2026 Aug 27, 2003 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathname...Show more Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.Show less
CVE-2003-0426 1Apple 1Darwin Streaming Server Apr 16, 2026 Aug 27, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privilege...Show more The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator.Show less
CVE-2003-0425 1Apple 1Darwin Streaming Server Apr 16, 2026 Aug 27, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... (triple dot) in an HTTP request.
CVE-2003-0424 1Apple 1Darwin Streaming Server Apr 16, 2026 Aug 27, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_br...Show more Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.Show less

Previous 1...430431432...435 Next