CVSS: 7.5EPSS: 5%CPEs: 11EXPL: 0CVE-2007-0741
https://notcve.org/view.php?id=CVE-2007-0741
Buffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Internet Sharing is enabled, allows remote attackers to execute arbitrary code via malformed RTSP packets. Desbordamiento de búfer en natd en network_cmds en Apple Mac OS X 10.3.9 hasta 10.4.9, cuando Internet Sharing está activado, permite a atacantes remotos ejecutar código de su elección a través de paquetes RTSP mal formados. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://secunia.com/advisories/24966 http://www.osvdb.org/34865 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017942 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/1470 •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2007-0742
https://notcve.org/view.php?id=CVE-2007-0742
The WebFoundation framework in Apple Mac OS X 10.3.9 and earlier allows subdomain cookies to be accessed by the parent domain, which allows remote attackers to obtain sensitive information. El marco WebFoundation en Apple Mac OS X 10.3.9 y anteriores permite a cookies de subdominio ser accedidas por el dominio padre, lo cual podría permite a atacantes remotos obtener información sensible. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://secunia.com/advisories/24966 http://www.osvdb.org/34866 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017942 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/1470 •
CVSS: 4.9EPSS: 0%CPEs: 11EXPL: 0CVE-2007-0743
https://notcve.org/view.php?id=CVE-2007-0743
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mount_sub command, which may allow local users to obtain sensitive information by listing the process. URLMount en Apple Mac OS X 10.3.9 hasta la 10.4.9 aprueba los credenciales de nombre y contraseña para montar un sistema de ficheros sobre servidores SMB como argumento de linea de comando en el comando mount_sub, lo caul podría permitir a usuarios locales obtener información sensible listando los procesos. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://secunia.com/advisories/24966 http://www.osvdb.org/34867 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017942 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/1470 •
CVSS: 9.3EPSS: 1%CPEs: 22EXPL: 0CVE-2007-0735
https://notcve.org/view.php?id=CVE-2007-0735
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory. Vulnerabilidad de uso después de la liberación (Use-After-Free) en Libinfo en Apple Mac OS X 10.3.9 hasta la 10.4.9 permite a atacantes remotos provocar denegación de servicio (caida de aplicación) o posiblemente ejecutar código de su elección a través de vectores no especificados afectadndo a páginas web manipuladas que disparán ciertas condiciones de error que no son informadas ed forma adecuada bajo ciertas circustancias, desembocando en un acceso a memoria no asignada. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://secunia.com/advisories/24966 http://www.osvdb.org/34860 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017942 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/1470 •
CVSS: 4.6EPSS: 0%CPEs: 11EXPL: 0CVE-2007-0737
https://notcve.org/view.php?id=CVE-2007-0737
The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors. La ventana de inicio de sesión en Apple Mac OS X 10.3.9 hasta 10.4.9 no comprueba adecuadamente ciertas variables de entorno, lo cual permite a usuarios locales obtener privilegios mediante vectores no especificados. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://secunia.com/advisories/24966 http://www.osvdb.org/34862 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017939 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/1470 •