CVSS: 4.6EPSS: 0%CPEs: 14EXPL: 0CVE-2003-0518
https://notcve.org/view.php?id=CVE-2003-0518
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow. El salvapantallas de MacOS X permite a usuarios con acceso físico a la máquina hacer que el salvapantallas se caiga y ganar acceso a la sesión subyacente mediante un número de caracteres largo en el campo de contraseña, posiblemente disparando un desbordamiento de búfer. • http://archives.neohapsis.com/archives/bugtraq/2003-07/0034.html http://archives.neohapsis.com/archives/bugtraq/2003-07/0187.html http://docs.info.apple.com/article.html?artnum=120232 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2003-0378
https://notcve.org/view.php?id=CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set. El sistema de autentificación de login de Kerberos sobre Mac OS X, cuando se usua con un servidor LDAPv3 y autentificación LDAP, puede enviar passwords en texto plano al servidor LDAP si no está fijado el atributo AuthenticationAuthority • http://docs.info.apple.com/article.html?artnum=107579 http://www.kb.cert.org/vuls/id/467828 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0242
https://notcve.org/view.php?id=CVE-2003-0242
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies. IPSec en Mac OS X anterior a la 10.2.6 no maneja correctamente ciertas políticas de seguridad asignadas por puerto, lo que permitiría tráfico que no está explícitamente permitido por esas políticas. • http://docs.info.apple.com/article.html?artnum=61798 http://secunia.com/advisories/8798 http://securitytracker.com/id?1006796 http://www.kb.cert.org/vuls/id/869548 http://www.securityfocus.com/bid/7628 https://exchange.xforce.ibmcloud.com/vulnerabilities/12027 •
CVSS: 7.2EPSS: 0%CPEs: 22EXPL: 1CVE-2003-0171 – Apple Mac OSX 10.2.4 - DirectoryService 'PATH' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2003-0171
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program. DirectoryServices en MacOS X se fia de la variable de entorno PATH para localizar y ejecutar el comando touch, lo que permite a usurarios locales ejecutar comandos arbitrarios modificando PATH para que apunte a un directorio que contenga un programa 'touch' malicioso. • https://www.exploit-db.com/exploits/15 http://lists.apple.com/mhonarc/security-announce/msg00028.html http://www.atstake.com/research/advisories/2003/a041003-1.txt •
CVSS: 6.4EPSS: 0%CPEs: 21EXPL: 0CVE-2003-0198
https://notcve.org/view.php?id=CVE-2003-0198
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files. Mac OS X anteriores a 10.2.5 permite a usuarios invitados modificar los permisos de la carpeta DropBox y leer ficheros no autorizados. • http://lists.apple.com/mhonarc/security-announce/msg00028.html •