Page 399 of 2061 results (0.009 seconds)

CVSS: 4.6EPSS: 0%CPEs: 3EXPL: 0

Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles. • http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html •

CVSS: 2.1EPSS: 0%CPEs: 52EXPL: 2

The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file. • https://www.exploit-db.com/exploits/793 http://lists.apple.com/archives/security-announce/2005/May/msg00001.html http://marc.info/?l=bugtraq&m=110780124707975&w=2 http://secunia.com/advisories/14188 http://www.securityfocus.com/bid/12458 https://exchange.xforce.ibmcloud.com/vulnerabilities/19253 •

CVSS: 10.0EPSS: 0%CPEs: 26EXPL: 0

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors. • http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html http://secunia.com/advisories/10723 http://www.auscert.org.au/render.html?it=3791&cid=1 http://www.securityfocus.com/bid/9504 •

CVSS: 5.0EPSS: 0%CPEs: 35EXPL: 1

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte. • http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities https://exchange.xforce.ibmcloud.com/vulnerabilities/18357 •

CVSS: 7.5EPSS: 6%CPEs: 35EXPL: 0

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization. • http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://secunia.com/advisories/13362 http://www.ciac.org/ciac/bulletins/p-049.shtml http://www.securityfocus.com/bid/11802 https://exchange.xforce.ibmcloud.com/vulnerabilities/18348 • CWE-178: Improper Handling of Case Sensitivity •