VAR-200508-0316

Vulnerability from variot - Updated: 2025-04-03 21:42

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file. This vulnerability may lead to remote execution of arbitrary code. Apple Safari fails to perform security checks on hyperlinks in rich text content, which may allow an attacker to execute arbitrary commands on a vulnerable system. Apple From Security Update 2005-007 Has been released. Mac OS X, Mac OS X Server, Safari web browser Vulnerability has been confirmed in such as.The potential impact depends on each vulnerability. For more information Apple See the information provided by. These vulnerabilities could allow a remote third party to execute arbitrary code or commands, bypass access restrictions, DoS You can be attacked. Apache is prone to five vulnerabilities ranging from buffer overflows to access validation vulnerabilities. The CVE Mitre candidate IDs CAN-2005-1344, CAN-2004-0942, CAN-2004-0885, CAN-2004-1083, and CAN-2004-1084 are assigned to these issues. Appkit is prone to three vulnerabilities. The CVE Mitre candidate IDs CAN-2005-2501, CAN-2005-2502, and CAN-2005-2503 are assigned to these issues. Bluetooth is prone to a vulnerability regarding authentication bypass. The CVE Mitre candidate ID CAN-2005-2504 is assigned to this issue. CoreFoundation is prone to two vulnerabilities, one resulting in a buffer overflow, the other a denial-of-service vulnerability. The CVE Mitre candidate IDs CAN-2005-2505 and CAN-2005-2506 are assigned to these issues. CUPS is prone to two vulnerabilities resulting in a denial of service until the service can be restarted. The CVE Mitre candidate IDs CAN-2005-2525 and CAN-2005-2526 are assigned to these issues. Directory Services is prone to three vulnerabilities. These issues vary from buffer overflow, unauthorized account creation and deletion, and privilege escalation. The CVE Mitre candidate IDs CAN-2005-2507, CAN-2005-2508 and CAN-2005-2519 are assigned to these issues. HItoolbox is prone to a vulnerability that could result in information disclosure. The CVE Mitre candidate ID CAN-2005-2513 is assigned to this issue. The CVE Mitre candidate IDs CAN-2004-1189, CAN-2005-1174, CAN-2005-1175, CAN-2005-1689, and CAN-2005-2511 are assigned to these issues. loginwindow is prone to a vulnerability that could permit a user to gain access to other logged-in accounts. The CVE Mitre candidate ID CAN-2005-2509 is assigned to this issue. Mail is prone to a vulnerability regarding the loss of privacy when remote images are loaded into HTML email. The CVE Mitre candidate ID CAN-2005-2512 is assigned to this issue. The CVE Mitre candidate IDs CAN-2005-0709, CAN-2005-0710, and CAN-2005-0711 are assigned to these issues. OpenSSL is prone to two vulnerabilities resulting in denial of service. The CVE Mitre candidate IDs CAN-2004-0079 and CAN-2004-0112 are assigned to these issues. The CVE Mitre candidate ID CAN-2005-2514 is assigned to this issue. QuartzComposerScreenSaver is prone to a vulnerability that could allow users to open pages while the RSS Visualizer screen is locked. The CVE Mitre candidate ID CAN-2005-2515 is assigned to this issue. Safari is prone to two vulnerabilities that could result in arbitrary command execution or have information submitted to an incorrect site. The CVE Mitre candidate IDs CAN-2005-2516 and CAN-2005-2517 are assigned to these issues. SecurityInterface is prone to a vulnerability that could expose recently used passwords. The CVE Mitre candidate ID CAN-2005-2520 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-2518 is assigned to this issue. servermgr_ipfilter is prone to a vulnerability regarding firewall settings not always being written to the Active Rules. The CVE Mitre candidate ID CAN-2005-2510 is assigned to this issue. SquirrelMail is prone to two vulnerabilities including a cross-site scripting issue. The CVE Mitre candidate IDs CAN-2005-1769 and CAN-2005-2095 are assigned to these issues. The CVE Mitre candidate ID CAN-2005-2521 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-2522 is assigned to this issue. Weblog Server is prone to multiple cross-site scripting vulnerabilities. The CVE Mitre candidate ID CAN-2005-2523 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-0605 is assigned to this issue. The CVE Mitre candidate IDs CAN-2005-2096 and CAN-2005-1849 are assigned to these issues. These vulnerabilities will be separated into individual BIDs upon further analysis of the issues.

Bist Du interessiert an einem neuen Job in IT-Sicherheit?

Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/

TITLE: Mac OS X Security Update Fixes Multiple Vulnerabilities

SECUNIA ADVISORY ID: SA16449

VERIFY ADVISORY: http://secunia.com/advisories/16449/

CRITICAL: Highly critical

IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of sensitive information, Privilege escalation, DoS, System access

WHERE:

From remote

OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/

DESCRIPTION: Apple has issued a security update for Mac OS X, which fixes more than 40 vulnerabilities.

1) A boundary error in htdigest can be exploited to cause a buffer overflow by passing an overly long realm argument.

NOTE: htdigest is by default only locally accessible and not setuid / setgid.

For more information: SA12787 SA13045

3) A security issue in Apache 2 results in access to ".DS_Store" files and files starting with ".ht" not being fully blocked. The problem is that the Apache configuration blocks access in a case sensitive way, but the Apple HFS+ filesystem performs file access in a case insensitive way.

4) A security issue in Apache 2 makes it possible to bypass the normal Apache file handlers and retrieve file data and resource fork content via HTTP. The problem is that the Apple HFS+ filesystem permits files to have multiple data streams.

NOTE: This issue may also affect other products installed on the HFS+ filesystem.

6) A boundary error in the AppKit component can be exploited to cause a buffer overflow and execute arbitrary code on a user's system when a specially crafted Microsoft Word .doc file is opened in e.g. TextEdit.

7) An error in the AppKit component allows malicious, local users with physical access to create additional local accounts.

8) A bug in the System Profiler causes it to display misleading information about whether or not a Bluetooth device requires authentication.

10) An error in the CoreFoundation framework when parsing Gregorian date information can cause applications to stall.

11) Errors in the CUPS printing service can cause it to stop printing when handling multiple, simultaneous print jobs.

13) Various errors in the privileged tool dsidentity can be exploited by unprivileged users to add or remove identity user accounts in Directory Services.

14) The slpd program in Directory Services creates temporary files insecurely. This can be exploited via symlink attacks to overwrite arbitrary files with root privileges.

15) An error in Hltoolbox may allow VoiceOver services to read contents from secure input fields.

16) An error in Kerberos can potentially be exploited by malicious users to compromise a vulnerable system.

For more information: SA13592

17) Multiple boundary errors in Kerberos can be exploited by malicious people to cause a DoS or potentially compromise a vulnerable system.

For more information: SA16041

18) An error in Kerberos when Kerberos authentication is enabled in addition to LDAP can be exploited to gain access to the root Terminal window.

21) Various errors in MySQL can potentially be exploited by malicious users to compromise a vulnerable system and by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

For more information: SA14547

22) Three vulnerabilities in OpenSSL can be exploited by malicious people to cause a DoS (Denial-of-Service).

For more information: SA11139

23) An unspecified boundary error in the ping utility can be exploited to cause a buffer overflow and potentially gain escalated privileges.

26) A security issue in Safari when submitting forms on a XSL formatted page may cause the information to be submitted to the next visited web page.

27) A security issue in the SecurityInterface component may cause recently used passwords to be visible in the password assistant.

34) A vulnerability in X11 can potentially be exploited by malicious people to compromise a vulnerable system. 8) John M. Glenn 9) David Remahl 10) David Remahl 13) KF and Neil Archibald. 18) Jim Foraker 20) Brad Miller and John Pell 23) Neil Archibald, Suresec LTD. 24) Jay Craft, GrooVault Entertainment. 26) Bill Kuker 27) Andrew Langmead 29) Matt Richard and Chris Pepper 31) Neil Archibald, Suresec LTD. 33) Donnie Werner and Atsushi MATSUO.

ORIGINAL ADVISORY: Apple: http://docs.info.apple.com/article.html?artnum=302163

OTHER REFERENCES: SA11139: http://secunia.com/advisories/11139/

SA12787: http://secunia.com/advisories/12787/

SA13045: http://secunia.com/advisories/13045/

SA13592: http://secunia.com/advisories/13592/

SA14460: http://secunia.com/advisories/14460/

SA14547: http://secunia.com/advisories/14547/

SA15721: http://secunia.com/advisories/15721/

SA15949: http://secunia.com/advisories/15949/

SA16041: http://secunia.com/advisories/16041/

SA16058: http://secunia.com/advisories/16058/

SA16137: http://secunia.com/advisories/16137/

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

.

I.

II. Impact

The impacts of these vulnerabilities vary.

III.

Appendix A. References

 * US-CERT Vulnerability Note VU#913820 -
   <http://www.kb.cert.org/vuls/id/913820>

 * US-CERT Vulnerability Note VU#461412 -
   <http://www.kb.cert.org/vuls/id/461412>

 * US-CERT Vulnerability Note VU#435188 -
   <http://www.kb.cert.org/vuls/id/435188>

 * US-CERT Vulnerability Note VU#172948 -
   <http://www.kb.cert.org/vuls/id/172948>

 * US-CERT Vulnerability Note VU#420316 -
   <http://www.kb.cert.org/vuls/id/420316>

 * US-CERT Vulnerability Note VU#709220 -
   <http://www.kb.cert.org/vuls/id/709220>

 * Apple Security Update 2005-007 -
   <http://docs.info.apple.com/article.html?artnum=302163>

 * Mac OS X: Updating your software -
   <http://docs.info.apple.com/article.html?artnum=106704>

The most recent version of this document can be found at:

 <http://www.us-cert.gov/cas/techalerts/TA05-229A.html>

Feedback can be directed to US-CERT. Please send email to cert@cert.org with "TA05-229A Feedback VU#913820" in the subject.

Mailing list information:

 <http://www.us-cert.gov/cas/>

Produced 2005 by US-CERT, a government organization.

Terms of use:

 <http://www.us-cert.gov/legal.html>

Revision History

August 17, 2005: Initial release

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBQwOKkRhoSezw4YfQAQLxywgAkWTcoA3KoWAiY5YYPGejCVbWw/yFzAqy 4Fb0z9WXfwhwB3/L/IxLvJGhPdVF/b6buP/KZgIxalwsRu6GPjJp5Aj+Cbtf/8KI 2ca0bRxS3vZJS52ZOEVpS2Z2M8JdcBA2CgfvIw6GEklXD9MTjXXwYUhB6tYK4Ar0 +UAk6xxaaMRvKztOYbRZhy5/5Kz2Xd9a5UwO/hbojQmilv4elW3iZhGWP+nLEpSI D680yttkY++UzmYGYHO0Wm+SAK4fzXKxs/4PMfWvNgP8lKJsHXjjr7KLFtmgCiWU oxhOB8RdqVNTKE2kYEq1kiopusBtwK/x35VNr3uCjg23CxYuv8HAjw== =yJpi -----END PGP SIGNATURE-----

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200508-0316",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": null,
        "scope": null,
        "trust": 4.8,
        "vendor": "apple computer",
        "version": null
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.4.2"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.4"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.4.1"
      },
      {
        "model": "safari",
        "scope": null,
        "trust": 1.4,
        "vendor": "apple",
        "version": null
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "apple",
        "version": "*"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "version 10.3.9 (panther) and version 10.4.2 (tiger)"
      },
      {
        "model": "mac os x server",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "version 10.3.9 and version 10.4.2"
      },
      {
        "model": "linux i386",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "redhat",
        "version": "9.0"
      },
      {
        "model": "fedora core2",
        "scope": null,
        "trust": 0.3,
        "vendor": "redhat",
        "version": null
      },
      {
        "model": "fedora core1",
        "scope": null,
        "trust": 0.3,
        "vendor": "redhat",
        "version": null
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.2"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.1"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.9"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.2"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.1"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.9"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "BID",
        "id": "14567"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:apple:mac_os_x",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:apple:mac_os_x_server",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:apple:safari",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "OpenSSL Security Advisory",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-2522",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 4.9,
            "id": "CVE-2005-2522",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 4.9,
            "id": "VHN-13731",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2005-2522",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#461412",
            "trust": 0.8,
            "value": "14.11"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#709220",
            "trust": 0.8,
            "value": "11.57"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#435188",
            "trust": 0.8,
            "value": "15.49"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#172948",
            "trust": 0.8,
            "value": "15.49"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#420316",
            "trust": 0.8,
            "value": "10.41"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#913820",
            "trust": 0.8,
            "value": "18.17"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200508-194",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-13731",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2005-2522",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.   This vulnerability may lead to remote execution of arbitrary code. Apple Safari fails to perform security checks on hyperlinks in rich text content, which may allow an attacker to execute arbitrary commands on a vulnerable system. Apple From Security Update 2005-007 Has been released. Mac OS X, Mac OS X Server, Safari web browser Vulnerability has been confirmed in such as.The potential impact depends on each vulnerability. For more information Apple See the information provided by. These vulnerabilities could allow a remote third party to execute arbitrary code or commands, bypass access restrictions, DoS You can be attacked. \nApache is prone to five vulnerabilities ranging from buffer overflows to access validation vulnerabilities. The CVE Mitre candidate IDs CAN-2005-1344, CAN-2004-0942, CAN-2004-0885, CAN-2004-1083, and CAN-2004-1084 are assigned to these issues. \nAppkit is prone to three vulnerabilities. The CVE Mitre candidate IDs CAN-2005-2501, CAN-2005-2502, and CAN-2005-2503 are assigned to these issues. \nBluetooth is prone to a vulnerability regarding authentication bypass. The CVE Mitre candidate ID CAN-2005-2504 is assigned to this issue. \nCoreFoundation is prone to two vulnerabilities, one resulting in a buffer overflow, the other a denial-of-service vulnerability. The CVE Mitre candidate IDs CAN-2005-2505 and CAN-2005-2506 are assigned to these issues. \nCUPS is prone to two vulnerabilities resulting in a denial of service until the service can be restarted. The CVE Mitre candidate IDs CAN-2005-2525 and CAN-2005-2526 are assigned to these issues. \nDirectory Services is prone to three vulnerabilities. These issues vary from buffer overflow, unauthorized account creation and deletion, and privilege escalation. The CVE Mitre candidate IDs CAN-2005-2507, CAN-2005-2508 and CAN-2005-2519 are assigned to these issues. \nHItoolbox is prone to a vulnerability that could result in information disclosure. The CVE Mitre candidate ID CAN-2005-2513 is assigned to this issue. The CVE Mitre candidate IDs CAN-2004-1189, CAN-2005-1174, CAN-2005-1175, CAN-2005-1689, and CAN-2005-2511 are assigned to these issues. \nloginwindow is prone to a vulnerability that could permit a user to gain access to other logged-in accounts. The CVE Mitre candidate ID CAN-2005-2509 is assigned to this issue. \nMail is prone to a vulnerability regarding the loss of privacy when remote images are loaded into HTML email. The CVE Mitre candidate ID CAN-2005-2512 is assigned to this issue. The CVE Mitre candidate IDs CAN-2005-0709, CAN-2005-0710, and CAN-2005-0711 are assigned to these issues. \nOpenSSL is prone to two vulnerabilities resulting in denial of service. The CVE Mitre candidate IDs CAN-2004-0079 and CAN-2004-0112 are assigned to these issues. The CVE Mitre candidate ID CAN-2005-2514 is assigned to this issue. \nQuartzComposerScreenSaver is prone to a vulnerability that could allow users to open pages while the RSS Visualizer screen is locked. The CVE Mitre candidate ID CAN-2005-2515 is assigned to this issue. \nSafari is prone to two vulnerabilities that could result in arbitrary command execution or have information submitted to an incorrect site. The CVE Mitre candidate IDs CAN-2005-2516 and CAN-2005-2517 are assigned to these issues. \nSecurityInterface is prone to a vulnerability that could expose recently used passwords. The CVE Mitre candidate ID CAN-2005-2520 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-2518 is assigned to this issue. \nservermgr_ipfilter is prone to a vulnerability regarding firewall settings not always being written to the Active Rules. The CVE Mitre candidate ID CAN-2005-2510 is assigned to this issue. \nSquirrelMail is prone to two vulnerabilities including a cross-site scripting issue. The CVE Mitre candidate IDs CAN-2005-1769 and CAN-2005-2095 are assigned to these issues. The CVE Mitre candidate ID CAN-2005-2521 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-2522 is assigned to this issue. \nWeblog Server is prone to multiple cross-site scripting vulnerabilities. The CVE Mitre candidate ID CAN-2005-2523 is assigned to this issue. The CVE Mitre candidate ID CAN-2005-0605 is assigned to this issue. The CVE Mitre candidate IDs CAN-2005-2096 and CAN-2005-1849 are assigned to these issues. \nThese vulnerabilities will be separated into individual BIDs upon further analysis of the issues. \n\n----------------------------------------------------------------------\n\nBist Du interessiert an einem neuen Job in IT-Sicherheit?\n\n\nSecunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-\nSicherheit:\nhttp://secunia.com/secunia_vacancies/\n\n----------------------------------------------------------------------\n\nTITLE:\nMac OS X Security Update Fixes Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA16449\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/16449/\n\nCRITICAL:\nHighly critical\n\nIMPACT:\nSecurity Bypass, Cross Site Scripting, Manipulation of data, Exposure\nof sensitive information, Privilege escalation, DoS, System access\n\nWHERE:\n\u003eFrom remote\n\nOPERATING SYSTEM:\nApple Macintosh OS X\nhttp://secunia.com/product/96/\n\nDESCRIPTION:\nApple has issued a security update for Mac OS X, which fixes more\nthan 40 vulnerabilities. \n\n1) A boundary error in htdigest can be exploited to cause a buffer\noverflow by passing an overly long realm argument. \n\nNOTE: htdigest is by default only locally accessible and not setuid /\nsetgid. \n\nFor more information:\nSA12787\nSA13045\n\n3) A security issue in Apache 2 results in access to \".DS_Store\"\nfiles and files starting with \".ht\" not being fully blocked. The\nproblem is that the Apache configuration blocks access in a case\nsensitive way, but the Apple HFS+ filesystem performs file access in\na case insensitive way. \n\n4) A security issue in Apache 2 makes it possible to bypass the\nnormal Apache file handlers and retrieve file data and resource fork\ncontent via HTTP. The problem is that the Apple HFS+ filesystem\npermits files to have multiple data streams. \n\nNOTE: This issue may also affect other products installed on the HFS+\nfilesystem. \n\n6) A boundary error in the AppKit component can be exploited to cause\na buffer overflow and execute arbitrary code on a user\u0027s system when a\nspecially crafted Microsoft Word .doc file is opened in e.g. \nTextEdit. \n\n7) An error in the AppKit component allows malicious, local users\nwith physical access to create additional local accounts. \n\n8) A bug in the System Profiler causes it to display misleading\ninformation about whether or not a Bluetooth device requires\nauthentication. \n\n10) An error in the CoreFoundation framework when parsing Gregorian\ndate information can cause applications to stall. \n\n11) Errors in the CUPS printing service can cause it to stop printing\nwhen handling multiple, simultaneous print jobs. \n\n13) Various errors in the privileged tool dsidentity can be exploited\nby unprivileged users to add or remove identity user accounts in\nDirectory Services. \n\n14) The slpd program in Directory Services creates temporary files\ninsecurely. This can be exploited via symlink attacks to overwrite\narbitrary files with root privileges. \n\n15) An error in Hltoolbox may allow VoiceOver services to read\ncontents from secure input fields. \n\n16) An error in Kerberos can potentially be exploited by malicious\nusers to compromise a vulnerable system. \n\nFor more information:\nSA13592\n\n17) Multiple boundary errors in Kerberos can be exploited by\nmalicious people to cause a DoS or potentially compromise a\nvulnerable system. \n\nFor more information:\nSA16041\n\n18) An error in Kerberos when Kerberos authentication is enabled in\naddition to LDAP can be exploited to gain access to the root Terminal\nwindow. \n\n21) Various errors in MySQL can potentially be exploited by malicious\nusers to compromise a vulnerable system and by malicious, local users\nto perform certain actions on a vulnerable system with escalated\nprivileges. \n\nFor more information:\nSA14547\n\n22) Three vulnerabilities in OpenSSL can be exploited by malicious\npeople to cause a DoS (Denial-of-Service). \n\nFor more information:\nSA11139\n\n23) An unspecified boundary error in the ping utility can be\nexploited to cause a buffer overflow and potentially gain escalated\nprivileges. \n\n26) A security issue in Safari when submitting forms on a XSL\nformatted page may cause the information to be submitted to the next\nvisited web page. \n\n27) A security issue in the SecurityInterface component may cause\nrecently used passwords to be visible in the password assistant. \n\n34) A vulnerability in X11 can potentially be exploited by malicious\npeople to compromise a vulnerable system. \n8) John M. Glenn\n9) David Remahl\n10) David Remahl\n13) KF and Neil Archibald. \n18) Jim Foraker\n20) Brad Miller and John Pell\n23) Neil Archibald, Suresec LTD. \n24) Jay Craft, GrooVault Entertainment. \n26) Bill Kuker\n27) Andrew Langmead\n29) Matt Richard and Chris Pepper\n31) Neil Archibald, Suresec LTD. \n33) Donnie Werner and Atsushi MATSUO. \n\nORIGINAL ADVISORY:\nApple:\nhttp://docs.info.apple.com/article.html?artnum=302163\n\nOTHER REFERENCES:\nSA11139:\nhttp://secunia.com/advisories/11139/\n\nSA12787:\nhttp://secunia.com/advisories/12787/\n\nSA13045:\nhttp://secunia.com/advisories/13045/\n\nSA13592:\nhttp://secunia.com/advisories/13592/\n\nSA14460:\nhttp://secunia.com/advisories/14460/\n\nSA14547:\nhttp://secunia.com/advisories/14547/\n\nSA15721:\nhttp://secunia.com/advisories/15721/\n\nSA15949:\nhttp://secunia.com/advisories/15949/\n\nSA16041:\nhttp://secunia.com/advisories/16041/\n\nSA16058:\nhttp://secunia.com/advisories/16058/\n\nSA16137:\nhttp://secunia.com/advisories/16137/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\n\nI. \n\n\nII. Impact\n\n   The impacts of these vulnerabilities vary. \n\n\nIII. \n\n\nAppendix A. References\n\n     * US-CERT Vulnerability Note VU#913820 -\n       \u003chttp://www.kb.cert.org/vuls/id/913820\u003e\n\n     * US-CERT Vulnerability Note VU#461412 -\n       \u003chttp://www.kb.cert.org/vuls/id/461412\u003e\n\n     * US-CERT Vulnerability Note VU#435188 -\n       \u003chttp://www.kb.cert.org/vuls/id/435188\u003e\n\n     * US-CERT Vulnerability Note VU#172948 -\n       \u003chttp://www.kb.cert.org/vuls/id/172948\u003e\n\n     * US-CERT Vulnerability Note VU#420316 -\n       \u003chttp://www.kb.cert.org/vuls/id/420316\u003e\n\n     * US-CERT Vulnerability Note VU#709220 -\n       \u003chttp://www.kb.cert.org/vuls/id/709220\u003e\n\n     * Apple Security Update 2005-007 -\n       \u003chttp://docs.info.apple.com/article.html?artnum=302163\u003e\n\n     * Mac OS X: Updating your software -\n       \u003chttp://docs.info.apple.com/article.html?artnum=106704\u003e\n\n\n ____________________________________________________________________\n\n   The most recent version of this document can be found at:\n\n     \u003chttp://www.us-cert.gov/cas/techalerts/TA05-229A.html\u003e\n ____________________________________________________________________\n\n   Feedback can be directed to US-CERT. Please send email to\n   \u003ccert@cert.org\u003e with \"TA05-229A Feedback VU#913820\" in the subject. \n ____________________________________________________________________\n\n   Mailing list information:\n\n     \u003chttp://www.us-cert.gov/cas/\u003e\n ____________________________________________________________________\n\n   Produced 2005 by US-CERT, a government organization. \n\n   Terms of use:\n\n     \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\n\nRevision History\n\n   August 17, 2005: Initial release\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.2.1 (GNU/Linux)\n\niQEVAwUBQwOKkRhoSezw4YfQAQLxywgAkWTcoA3KoWAiY5YYPGejCVbWw/yFzAqy\n4Fb0z9WXfwhwB3/L/IxLvJGhPdVF/b6buP/KZgIxalwsRu6GPjJp5Aj+Cbtf/8KI\n2ca0bRxS3vZJS52ZOEVpS2Z2M8JdcBA2CgfvIw6GEklXD9MTjXXwYUhB6tYK4Ar0\n+UAk6xxaaMRvKztOYbRZhy5/5Kz2Xd9a5UwO/hbojQmilv4elW3iZhGWP+nLEpSI\nD680yttkY++UzmYGYHO0Wm+SAK4fzXKxs/4PMfWvNgP8lKJsHXjjr7KLFtmgCiWU\noxhOB8RdqVNTKE2kYEq1kiopusBtwK/x35VNr3uCjg23CxYuv8HAjw==\n=yJpi\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      },
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "db": "BID",
        "id": "14567"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "PACKETSTORM",
        "id": "39394"
      },
      {
        "db": "PACKETSTORM",
        "id": "39463"
      }
    ],
    "trust": 6.57
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "SECUNIA",
        "id": "16449",
        "trust": 4.9
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316",
        "trust": 3.5
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522",
        "trust": 2.9
      },
      {
        "db": "USCERT",
        "id": "TA05-229A",
        "trust": 2.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#461412",
        "trust": 1.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220",
        "trust": 1.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188",
        "trust": 1.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948",
        "trust": 1.7
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820",
        "trust": 1.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2005.0638",
        "trust": 1.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194",
        "trust": 0.7
      },
      {
        "db": "CERT/CC",
        "id": "TA05-229A",
        "trust": 0.6
      },
      {
        "db": "APPLE",
        "id": "APPLE-SA-2005-08-15",
        "trust": 0.6
      },
      {
        "db": "APPLE",
        "id": "APPLE-SA-2005-08-17",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "14567",
        "trust": 0.3
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "39394",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "39463",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "BID",
        "id": "14567"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "db": "PACKETSTORM",
        "id": "39394"
      },
      {
        "db": "PACKETSTORM",
        "id": "39463"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "id": "VAR-200508-0316",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T21:42:28.238000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "HT1222",
        "trust": 0.8,
        "url": "http://support.apple.com/kb/HT1222?viewlocale=ja_JP"
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/0xCyberY/CVE-T4PDF "
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.3,
        "url": "http://docs.info.apple.com/article.html?artnum=302163"
      },
      {
        "trust": 2.7,
        "url": "http://www.kb.cert.org/vuls/id/420316"
      },
      {
        "trust": 2.5,
        "url": "http://secunia.com/advisories/16449/"
      },
      {
        "trust": 2.4,
        "url": "http://secunia.com/advisories/16449/ "
      },
      {
        "trust": 1.8,
        "url": "http://lists.apple.com/archives/security-announce/2005/aug/msg00000.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.apple.com/archives/security-announce/2005//aug/msg00001.html"
      },
      {
        "trust": 1.8,
        "url": "http://www.us-cert.gov/cas/techalerts/ta05-229a.html"
      },
      {
        "trust": 1.6,
        "url": "http://www.auscert.org.au/5391"
      },
      {
        "trust": 1.6,
        "url": "http://www.ciac.org/ciac/bulletins/p-276.shtml"
      },
      {
        "trust": 0.8,
        "url": "http://webkit.opendarwin.org/"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2005-2518"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2501"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2005-2501"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2005-2502"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=can-2005-2522"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=can-2005-2516"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/cert/jvnta05-229a/"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2005-2502"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2005-2522"
      },
      {
        "trust": 0.8,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2005-2501"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2005-2516"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2005-2518"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2005-2501"
      },
      {
        "trust": 0.8,
        "url": "http://www.kb.cert.org/vuls/id/435188"
      },
      {
        "trust": 0.8,
        "url": "http://www.kb.cert.org/vuls/id/172948"
      },
      {
        "trust": 0.8,
        "url": "http://www.kb.cert.org/vuls/id/709220"
      },
      {
        "trust": 0.8,
        "url": "http://www.kb.cert.org/vuls/id/913820"
      },
      {
        "trust": 0.8,
        "url": "http://www.kb.cert.org/vuls/id/461412"
      },
      {
        "trust": 0.3,
        "url": "http://www.info.apple.com/usen/security/security_updates.html"
      },
      {
        "trust": 0.3,
        "url": "http://www.suresec.org/advisories/adv5.pdf"
      },
      {
        "trust": 0.3,
        "url": "http://www.apple.com"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/.html"
      },
      {
        "trust": 0.1,
        "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=9602"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/14547/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/15949/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/13592/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/11139/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005007macosx1042client.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/16041/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/12787/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_vacancies/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/14460/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/15721/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/13045/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005007macosx1039client.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/16137/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/16058/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005007macosx1039server.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/96/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005007macosx1042server.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/172948\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.us-cert.gov/cas/techalerts/ta05-229a.html\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://docs.info.apple.com/article.html?artnum=302163\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/420316\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/913820\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/435188\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.us-cert.gov/cas/\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://docs.info.apple.com/article.html?artnum=106704\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/461412\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.kb.cert.org/vuls/id/709220\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.us-cert.gov/legal.html\u003e"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "BID",
        "id": "14567"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "db": "PACKETSTORM",
        "id": "39394"
      },
      {
        "db": "PACKETSTORM",
        "id": "39463"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "db": "BID",
        "id": "14567"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "db": "PACKETSTORM",
        "id": "39394"
      },
      {
        "db": "PACKETSTORM",
        "id": "39463"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "date": "2005-08-19T00:00:00",
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "date": "2005-08-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "date": "2005-08-15T00:00:00",
        "db": "BID",
        "id": "14567"
      },
      {
        "date": "2009-04-03T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "date": "2005-08-17T03:29:45",
        "db": "PACKETSTORM",
        "id": "39394"
      },
      {
        "date": "2005-08-18T07:35:42",
        "db": "PACKETSTORM",
        "id": "39463"
      },
      {
        "date": "2003-07-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "date": "2005-08-19T04:00:00",
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#461412"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#709220"
      },
      {
        "date": "2005-08-18T00:00:00",
        "db": "CERT/CC",
        "id": "VU#435188"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#172948"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#420316"
      },
      {
        "date": "2005-08-17T00:00:00",
        "db": "CERT/CC",
        "id": "VU#913820"
      },
      {
        "date": "2008-09-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-13731"
      },
      {
        "date": "2008-09-05T00:00:00",
        "db": "VULMON",
        "id": "CVE-2005-2522"
      },
      {
        "date": "2006-05-05T23:10:00",
        "db": "BID",
        "id": "14567"
      },
      {
        "date": "2009-04-03T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2005-000828"
      },
      {
        "date": "2005-10-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2005-2522"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "39463"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Apple Mac OS X Server servermgrd authentication vulnerable to buffer overflow",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#461412"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200508-194"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.