261521
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2313
|
2017-08-8 10:30 |
2008-07-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261522
|
- |
|
apple
|
xcode xcode_tools
|
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive infor…
|
CWE-200
Information Exposure
|
CVE-2008-2318
|
2017-08-8 10:30 |
2008-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261523
|
- |
|
apple
|
coregraphics
|
Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
|
NVD-CWE-noinfo CWE-399
Resource Management Errors
|
CVE-2008-2321
|
2017-08-8 10:30 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261524
|
- |
|
apple
|
coregraphics
|
Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a…
|
CWE-189
Numeric Errors
|
CVE-2008-2322
|
2017-08-8 10:30 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261525
|
- |
|
apple
|
data_detectors_engine
|
Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumption) via crafted textual content in messages.
|
NVD-CWE-noinfo CWE-399
Resource Management Errors
|
CVE-2008-2323
|
2017-08-8 10:30 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261526
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2324
|
2017-08-8 10:30 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261527
|
- |
|
apple
|
quicklook
|
QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office …
|
CWE-399
Resource Management Errors
|
CVE-2008-2325
|
2017-08-8 10:30 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261528
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.
|
CWE-200
Information Exposure
|
CVE-2008-2329
|
2017-08-8 10:30 |
2008-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261529
|
- |
|
apple
|
mac_os_x_server
|
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system adminis…
|
CWE-200
Information Exposure
|
CVE-2008-2330
|
2017-08-8 10:30 |
2008-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261530
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might al…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2331
|
2017-08-8 10:30 |
2008-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|