Apple : Security Vulnerabilities Published In 2003 (Execute Code)

2003 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2003-1091	DoS Exec Code Overflow	2003-12-31	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.
2	CVE-2003-0895	DoS Exec Code Overflow	2003-11-03	2008-10-24	4.6	User	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
3	CVE-2003-0694	Exec Code Overflow	2003-10-06	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
4	CVE-2003-0466	Exec Code Overflow	2003-08-27	2010-05-25	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
5	CVE-2003-0201	Exec Code Overflow	2003-05-05	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
6	CVE-2003-0171	Exec Code	2003-05-05	2008-09-10	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
7	CVE-2003-0168	Exec Code Overflow	2003-04-02	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
8	CVE-2003-0055	Exec Code Overflow	2003-03-07	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename.
9	CVE-2003-0054	Exec Code	2003-03-07	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.
10	CVE-2003-0050	Exec Code	2003-03-07	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.

Total number of vulnerabilities : 10 Page : 1 (This Page)