CVSS: 5.0EPSS: 1%CPEs: 6EXPL: 0CVE-2005-1260
https://notcve.org/view.php?id=CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb"). • ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc http://docs.info.apple.com/article.html?artnum=307041 http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html http://secunia.com/advisories/15447 http://secunia.com/advisories/19183 http://secunia.com/advisories/27274 http://secunia.com/advisories/27643 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1 http • CWE-400: Uncontrolled Resource Consumption •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2005-1472
https://notcve.org/view.php?id=CVE-2005-1472
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories. • http://lists.apple.com/archives/security-announce/2005/May/msg00004.html •
CVSS: 5.0EPSS: 1%CPEs: 71EXPL: 0CVE-2005-1043
https://notcve.org/view.php?id=CVE-2005-1043
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion. • http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 http://www.redhat.com/support/errata/RHSA-2005-406.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m •
CVSS: 2.1EPSS: 0%CPEs: 3EXPL: 0CVE-2004-0622
https://notcve.org/view.php?id=CVE-2004-0622
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. Mac OS 10.3.4 no limpia adecuadamente la memoria de contraseñas de inicio de sesión de usuario, de Keychain o FileVault, lo que podría permitir al usuario root o a un atacante con acceso físico obtener información sensible leyendo la memoria. • http://citp.princeton.edu/pub/coldboot.pdf http://marc.info/?l=bugtraq&m=108819559925981&w=2 http://www.securityfocus.com/archive/1/488930/100/100/threaded http://www.securityfocus.com/archive/1/488948/100/100/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/16557 •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2001-1411
https://notcve.org/view.php?id=CVE-2001-1411
Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. Vulnerabilidad de cadena de formato en gm4 (m4) en Mac OS X puede permitir a usarios locales ganar privilegios si gm4 es invocado con programas con setuid. • http://lists.apple.com/mhonarc/security-announce/msg00038.html http://marc.info/?l=bugtraq&m=100368233714229&w=2 http://www.iss.net/security_center/static/10174.php http://www.kb.cert.org/vuls/id/147587 •