CVSS: 5.0EPSS: 3%CPEs: 36EXPL: 1CVE-2004-0165
https://notcve.org/view.php?id=CVE-2004-0165
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges. Vulnerabilidad de cadena de formato en el demonio de Protocolo Punto-a-Punto (pppd) 2.4.0 de Mac OS X 10.3.2 y anteriores permite a atacantes remotos leer datos arbitrarios del proceso pppd, incluyendo credenciales de autenticación PAP o CHAP, para ganar privilegios. • http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html http://www.atstake.com/research/advisories/2004/a022304-1.txt http://www.kb.cert.org/vuls/id/841742 http://www.osvdb.org/6822 http://www.securityfocus.com/bid/9730 https://exchange.xforce.ibmcloud.com/vulnerabilities/15297 •
CVSS: 5.0EPSS: 1%CPEs: 4EXPL: 0CVE-2003-1005
https://notcve.org/view.php?id=CVE-2003-1005
The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences. • http://lists.apple.com/archives/security-announce/2003/Dec/msg00001.html http://secunia.com/advisories/10474 http://www.auscert.org.au/render.html?it=3704 http://www.securityfocus.com/bid/9266 •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2003-0975
https://notcve.org/view.php?id=CVE-2003-0975
Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain. Apple Safari 1.0 a 1.1 en Mac OS X 10.3.1 y Mac OS X 10.2.8 permite a atacantes remotos robar 'cookies' de usuarios de otro dominio mediante un enlace con un carácter nulo codificado-hex (%00) seguido del dominio objetivo. • http://docs.info.apple.com/article.html?artnum=61798 http://lists.apple.com/mhonarc/security-announce/msg00042.html http://marc.info/?l=bugtraq&m=106917674428552&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/7973 •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2003-0913
https://notcve.org/view.php?id=CVE-2003-0913
Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access." Vulnerabilidad desconocida en la aplicación de Terminal de Mac OS X 10.3 (cliente y servidor) puede permitir "acceso no autorizado". • http://docs.info.apple.com/article.html?artnum=120269 http://docs.info.apple.com/article.html?artnum=61798 http://lists.apple.com/mhonarc/security-announce/msg00040.html http://www.securityfocus.com/bid/8979 https://exchange.xforce.ibmcloud.com/vulnerabilities/13620 •
CVSS: 2.1EPSS: 0%CPEs: 30EXPL: 0CVE-2003-0876
https://notcve.org/view.php?id=CVE-2003-0876
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended. Finder en Mac OS X 10.2.8 y anteriores establece permisos de lectura/escritura/ejecución globales en directorios cuando son arrastrados (copiados) de un volumen montado, como una imagen de disco (DMG), lo que podría causar que los directorios tuvieran permisos menos restrictivos que los deseados. • http://www.atstake.com/research/advisories/2003/a102803-1.txt http://www.securityfocus.com/bid/8916 http://www.securityfocus.com/bid/8917 https://exchange.xforce.ibmcloud.com/vulnerabilities/13537 •