CVSS: 6.4EPSS: 1%CPEs: 2EXPL: 0CVE-2007-5855
https://notcve.org/view.php?id=CVE-2007-5855
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity. Mail en Apple Mac OS X 10.4.11 y 10.5.1, cuando una cuenta SMTP se ha creado utilizado el asistente de cuentas, podría utilizar la autenticación en texto plano incluso cuando la validación MD5 Challenge-Response está activada, lo cual hace más fácil para atacantes remotos capturar la actividad de la cuenta. • http://docs.info.apple.com/article.html?artnum=307179 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://secunia.com/advisories/28136 http://securitytracker.com/id?1019107 http://www.securityfocus.com/bid/26910 http://www.us-cert.gov/cas/techalerts/TA07-352A.html http://www.vupen.com/english/advisories/2007/4238 https://exchange.xforce.ibmcloud.com/vulnerabilities/39104 • CWE-287: Improper Authentication •
CVSS: 6.4EPSS: 1%CPEs: 1EXPL: 0CVE-2007-5857
https://notcve.org/view.php?id=CVE-2007-5857
Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack. Quick Look (Vista Previa) en Apple Mac OS X 10.5.1 no evita que una película acceda a URLs cuando el archivo de película es previsualizado o si se crea un icono, lo cual podría permitir a atacantes remotos obtener información sensible mediante HREFTrack. • http://docs.info.apple.com/article.html?artnum=307179 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://secunia.com/advisories/28136 http://securitytracker.com/id?1019106 http://www.securityfocus.com/bid/26910 http://www.us-cert.gov/cas/techalerts/TA07-352A.html http://www.vupen.com/english/advisories/2007/4238 https://exchange.xforce.ibmcloud.com/vulnerabilities/39106 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 43%CPEs: 6EXPL: 1CVE-2007-5849 – Common UNIX Printing System 1.2/1.3 SNMP - 'asn1_get_string()' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-5849
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow. Un subdesbordamiento de enteros en la función asn1_get_string en el back end de SNMP (backend/snmp.c) para CUPS versiones 1.2 hasta 1.3.4, permite a los atacantes remotos ejecutar código arbitrario por medio de una respuesta SNMP especialmente diseñada que desencadena un desbordamiento de búfer en la región stack de la memoria. • https://www.exploit-db.com/exploits/30898 http://bugs.gentoo.org/show_bug.cgi?id=201570 http://docs.info.apple.com/article.html?artnum=307179 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html http://secunia.com/advisories/28113 http://secunia.com/advisories/28129 http://secunia.com/advisories/28136 http://secunia.com/advisories/28200 http://secunia.com/advisories/28386 http:// • CWE-189: Numeric Errors •
CVSS: 6.6EPSS: 0%CPEs: 1EXPL: 1CVE-2007-3876 – Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-3876
Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil. Un desbordamiento de búfer en la región stack de la memoria en SMB en Apple Mac OS X versión 10.4.11, permite a los usuarios locales ejecutar código arbitrario por medio de (1) una opción (-W) de un grupo de trabajo largo en mount_smbfs o (2) una manipulación no especificada de la línea de comandos en smbutil. • https://www.exploit-db.com/exploits/4759 http://docs.info.apple.com/article.html?artnum=307179 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=633 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://secunia.com/advisories/28136 http://securitytracker.com/id?1019106 http://www.securityfocus.com/bid/26910 http://www.securityfocus.com/bid/26926 http://www.us-cert.gov/cas/techalerts/TA07-352A.html http://www.vupen.com/english/adviso • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.4EPSS: 1%CPEs: 12EXPL: 1CVE-2007-5862
https://notcve.org/view.php?id=CVE-2007-5862
Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items via a crafted Java applet. Java en Mac OS X 10.4 hasta la 10.4.11 permite a atacantes remotos evitar los controles de acceso a Keychain y añadir o borrar puntos Keychain a traves de applet de Java manipulados. • http://docs.info.apple.com/article.html?artnum=307177 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://secunia.com/advisories/28115 http://www.securityfocus.com/bid/26877 http://www.vupen.com/english/advisories/2007/4224 • CWE-287: Improper Authentication •