The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog.
Max CVSS
2.1
EPSS Score
0.06%
Published
2009-09-15
Updated
2017-08-17
Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name."
Max CVSS
4.6
EPSS Score
0.06%
Published
2006-08-21
Updated
2011-03-08
2 vulnerabilities found