Apple: >> Mac Os X Server >> 10.2.2 Security Vulnerabilities
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
CVSS Score
4.6
EPSS Score
0.001
Published
2003-08-18
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
CVSS Score
7.2
EPSS Score
0.001
Published
2003-05-05
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
CVSS Score
6.4
EPSS Score
0.004
Published
2003-05-05
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
CVSS Score
7.5
EPSS Score
0.005
Published
2003-03-03
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.
CVSS Score
9.8
EPSS Score
0.1
Published
2002-12-18
Page 18