VAR-200512-0289

Vulnerability from variot - Updated: 2025-04-03 20:48

Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name. Safari is prone to a remote directory-traversal vulnerability. The vulnerability presents itself when a user tries to download a file from a remote location and the file name is excessively long. NOTE: This issue was previously discussed in BID 15647 (Apple Mac OS X Security Update 2005-009 Multiple Vulnerabilities), but has been assigned its own record to better document the vulnerability.

For more information: SA14530

2) An error in the Apache web server's "mod_ssl" module may be exploited by malicious people to bypass certain security restrictions.

For more information: SA16700

3) A boundary error exists in CoreFoundation when resolving certain URL.

4) An error in curl when handling NTLM authentication can be exploited by malicious people to compromise a user's system.

For more information: SA17193

5) An error exists in the ODBC Administrator utility helper tool "iodbcadmintoo".

6) An error in OpenSSL when handling certain compatibility options can potentially be exploited by malicious people to perform protocol rollback attacks.

8) An integer overflow error exists in the PCRE library that is used by Safari's JavaScript engine. This can potentially be exploited by malicious people to compromise a user's system. This can be exploited to cause the download file to be saved outside of the designated download directory.

For more information: SA15474

11) A boundary error exists in WebKit when handling certain specially crafted content.

For more information: SA15744

13) The syslog server does not properly sanitise messages before recording them.

SOLUTION: Apply Security Update 2005-009.

ORIGINAL ADVISORY: http://docs.info.apple.com/article.html?artnum=302847

OTHER REFERENCES: SA14530: http://secunia.com/advisories/14530/

SA16700: http://secunia.com/advisories/16700/

SA17193: http://secunia.com/advisories/17193/

SA17151: http://secunia.com/advisories/17151/

SA16502: http://secunia.com/advisories/16502/

SA15474: http://secunia.com/advisories/15474/

SA15744: http://secunia.com/advisories/15744/

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

APPLE-SA-2005-11-29 Security Update 2005-009

Security Update 2005-009 is now available and delivers the following security enhancements:

Apache2 CVE-ID: CVE-2005-2088 Available for: Mac OS X Server v10.3.9, Mac OS X Server v10.4.3 Impact: Cross-site scripting may be possible in certain configurations Description: The Apache 2 web server may allow an attacker to bypass protections using specially-crafted HTTP headers. This behavior is only present when Apache is used in conjunction with certain proxy servers, caching servers, or web application firewalls. This update addresses the issue by incorporating Apache version 2.0.55. Only Apache configurations that include the "SSLVerifyClient require" directive may be affected.

CoreFoundation CVE-ID: CVE-2005-2757 Available for: Mac OS X v10.4.3, Mac OS X Server v10.4.3 Impact: Resolving a maliciously-crafted URL may result in crashes or arbitrary code execution Description: By carefully crafting a URL, an attacker can trigger a heap buffer overflow in CoreFoundation which may result in a crash or arbitrary code execution. CoreFoundation is used by Safari and other applications. This update addresses the issue by performing additional validation of URLs. This issue does not affect systems prior to Mac OS X v10.4.

curl CVE-ID: CVE-2005-3185 Available for: Mac OS X v10.4.3, Mac OS X Server v10.4.3 Impact: Visiting a malicious HTTP server and using NTLM authentication may result in arbitrary code execution Description: Using curl with NTLM authentication enabled to download an HTTP resource may allow an attacker to supply an overlong user or domain name. This may cause a stack buffer overflow and lead to arbitrary code execution. This update addresses the issue by performing additional validation when using NTLM authentication. This issue does not affect systems prior to Mac OS X v10.4. This helper tool contains a vulnerability that may allow local users to execute arbitrary commands with raised privileges. This update addresses the issue by providing an updated iodbcadmintool that is not susceptible. Such attacks may cause an SSL connection to use the SSLv2 protocol which provides less protection than SSLv3 or TLS. Further information on this issue is available at http://www.openssl.org/news/secadv_20051011.txt. This update addresses the issue by incorporating OpenSSL version 0.9.7i. This could lead to unprivileged local users gaining elevated privileges on the server. This update addresses the issue by ensuring the credentials are protected. This may lead to the execution of arbitrary code. This update addresses the issue by providing a new version of the JavaScript engine that incorporates more robust input validation. However, if a web site suggests an overlong filename for a download, it is possible for Safari to create this file in other locations. Although the filename and location of the downloaded file content cannot be directly specified by remote servers, this may still lead to downloading content into locations accessible to other users. This update addresses the issue by rejecting overlong filenames. This could mislead users into unintentionally disclosing information to a web site. This update addresses the issue by displaying the originating site name in JavaScript dialog boxes. Credit to Jakob Balle of Secunia Research for reporting this issue. This may be triggered by content downloaded from malicious web sites in applications that use WebKit such as Safari. This update addresses the issue by removing the heap overflow from WebKit. Credit to Neil Archibald of Suresec LTD and Marco Mella for reporting this issue. Although the default configuration is not vulnerable to this issue, custom sudo configurations may not properly restrict users. Further information on this issue is available from: http://www.sudo.ws/sudo/alerts/path_race.html This update addresses the issue by incorporating sudo version 1.6.8p9. By supplying control characters such as the newline character, a local attacker could forge entries with the intention to mislead the system administrator. This update addresses the issue by specially handling control characters and other non-printable characters. This issue does not affect systems prior to Mac OS X v10.4. Credit to HELIOS Software GmbH for reporting this issue

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200512-0289",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "mac os x server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.4.3"
      },
      {
        "model": "mac os x server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.3.9"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.4.3"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "10.3.9"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.3"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.2"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.1"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.9"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.8"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.7"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.6"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.5"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.4"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.3"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.2"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.1"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.3"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.2"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4.1"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.4"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.9"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.8"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.7"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.6"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.5"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.4"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.3"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.2"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3.1"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.3"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "16926"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Todd C. Miller  Todd.Miller@courtesan.com",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-3702",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2005-3702",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.0,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-14910",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:P/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2005-3702",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200511-511",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-14910",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name. Safari is prone to a remote directory-traversal vulnerability. \nThe vulnerability presents itself when a user tries to download a file from a remote location and the file name is excessively long. \nNOTE: This issue was previously discussed in BID 15647 (Apple Mac OS X Security Update 2005-009 Multiple Vulnerabilities), but has been assigned its own record to better document the vulnerability. \n\nFor more information:\nSA14530\n\n2) An error in the Apache web server\u0027s \"mod_ssl\" module may be\nexploited by malicious people to bypass certain security\nrestrictions. \n\nFor more information:\nSA16700\n\n3) A boundary error exists in CoreFoundation when resolving certain\nURL. \n\n4) An error in curl when handling NTLM authentication can be\nexploited by malicious people to compromise a user\u0027s system. \n\nFor more information:\nSA17193\n\n5) An error exists in the ODBC Administrator utility helper tool\n\"iodbcadmintoo\". \n\n6) An error in OpenSSL when handling certain compatibility options\ncan potentially be exploited by malicious people to perform protocol\nrollback attacks. \n\n8) An integer overflow error exists in the PCRE library that is used\nby Safari\u0027s JavaScript engine. This can potentially be exploited by\nmalicious people to compromise a user\u0027s system. This can be exploited to cause the download\nfile to be saved outside of the designated download directory. \n\nFor more information:\nSA15474\n\n11) A boundary error exists in WebKit when handling certain specially\ncrafted content. \n\nFor more information:\nSA15744\n\n13) The syslog server does not properly sanitise messages before\nrecording them. \n\nSOLUTION:\nApply Security Update 2005-009. \n\nORIGINAL ADVISORY:\nhttp://docs.info.apple.com/article.html?artnum=302847\n\nOTHER REFERENCES:\nSA14530:\nhttp://secunia.com/advisories/14530/\n\nSA16700:\nhttp://secunia.com/advisories/16700/\n\nSA17193:\nhttp://secunia.com/advisories/17193/\n\nSA17151:\nhttp://secunia.com/advisories/17151/\n\nSA16502:\nhttp://secunia.com/advisories/16502/\n\nSA15474:\nhttp://secunia.com/advisories/15474/\n\nSA15744:\nhttp://secunia.com/advisories/15744/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nAPPLE-SA-2005-11-29 Security Update 2005-009\n\nSecurity Update 2005-009 is now available and delivers the following\nsecurity enhancements:\n\nApache2\nCVE-ID:  CVE-2005-2088\nAvailable for:  Mac OS X Server v10.3.9, Mac OS X Server v10.4.3\nImpact:  Cross-site scripting may be possible in certain\nconfigurations\nDescription:  The Apache 2 web server may allow an attacker to bypass\nprotections using specially-crafted HTTP headers.  This behavior is\nonly present when Apache is used in conjunction with certain proxy\nservers, caching servers, or web application firewalls.  This update\naddresses the issue by incorporating Apache version 2.0.55.  Only Apache configurations that\ninclude the \"SSLVerifyClient require\" directive may be affected. \n\nCoreFoundation\nCVE-ID:  CVE-2005-2757\nAvailable for:  Mac OS X v10.4.3, Mac OS X Server v10.4.3\nImpact:  Resolving a maliciously-crafted URL may result in crashes or\narbitrary code execution\nDescription:  By carefully crafting a URL, an attacker can trigger a\nheap buffer overflow in CoreFoundation which may result in a crash or\narbitrary code execution.  CoreFoundation is used by Safari and other\napplications.  This update addresses the issue by performing\nadditional validation of URLs.  This issue does not affect systems\nprior to Mac OS X v10.4. \n\ncurl\nCVE-ID:  CVE-2005-3185\nAvailable for:  Mac OS X v10.4.3, Mac OS X Server v10.4.3\nImpact:  Visiting a malicious HTTP server and using NTLM\nauthentication may result in arbitrary code execution\nDescription:  Using curl with NTLM authentication enabled to download\nan HTTP resource may allow an attacker to supply an overlong user or\ndomain name.  This may cause a stack buffer overflow and lead to\narbitrary code execution.  This update addresses the issue by\nperforming additional validation when using NTLM authentication. \nThis issue does not affect systems prior to Mac OS X v10.4.  This\nhelper tool contains a vulnerability that may allow local users to\nexecute arbitrary commands with raised privileges.  This update\naddresses the issue by providing an updated iodbcadmintool that is\nnot susceptible.  Such attacks may cause an SSL\nconnection to use the SSLv2 protocol which provides less protection\nthan SSLv3 or TLS.  Further information on this issue is available at\nhttp://www.openssl.org/news/secadv_20051011.txt.  This update\naddresses the issue by incorporating OpenSSL version 0.9.7i.  This could lead to unprivileged\nlocal users gaining elevated privileges on the server.  This update\naddresses the issue by ensuring the credentials are protected.  This may lead to the execution of arbitrary code.  This\nupdate addresses the issue by providing a new version of the\nJavaScript engine that incorporates more robust input validation.  However,\nif a web site suggests an overlong filename for a download, it is\npossible for Safari to create this file in other locations.  Although\nthe filename and location of the downloaded file content cannot be\ndirectly specified by remote servers, this may still lead to\ndownloading content into locations accessible to other users.  This\nupdate addresses the issue by rejecting overlong filenames.  This could mislead users into\nunintentionally disclosing information to a web site.  This update\naddresses the issue by displaying the originating site name in\nJavaScript dialog boxes.  Credit to Jakob Balle of Secunia Research\nfor reporting this issue.  This may be triggered by content\ndownloaded from malicious web sites in applications that use WebKit\nsuch as Safari.  This update addresses the issue by removing the heap\noverflow from WebKit.  Credit to Neil Archibald of Suresec LTD and\nMarco Mella for reporting this issue.  Although\nthe default configuration is not vulnerable to this issue, custom\nsudo configurations may not properly restrict users.  Further\ninformation on this issue is available from:\nhttp://www.sudo.ws/sudo/alerts/path_race.html\nThis update addresses the issue by incorporating sudo version\n1.6.8p9. \nBy supplying control characters such as the newline character, a\nlocal attacker could forge entries with the intention to mislead the\nsystem administrator.  This update addresses the issue by specially\nhandling control characters and other non-printable characters.  This\nissue does not affect systems prior to Mac OS X v10.4.  Credit to\nHELIOS Software GmbH for reporting this issue",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      },
      {
        "db": "BID",
        "id": "16926"
      },
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "db": "PACKETSTORM",
        "id": "41892"
      },
      {
        "db": "PACKETSTORM",
        "id": "42016"
      }
    ],
    "trust": 1.44
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2005-3702",
        "trust": 2.1
      },
      {
        "db": "SECUNIA",
        "id": "17813",
        "trust": 1.8
      },
      {
        "db": "VUPEN",
        "id": "ADV-2005-2659",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "15647",
        "trust": 1.7
      },
      {
        "db": "SECTRACK",
        "id": "1015294",
        "trust": 1.7
      },
      {
        "db": "APPLE",
        "id": "APPLE-SA-2005-11-29",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "16926",
        "trust": 0.4
      },
      {
        "db": "VULHUB",
        "id": "VHN-14910",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "41892",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "42016",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "db": "BID",
        "id": "16926"
      },
      {
        "db": "PACKETSTORM",
        "id": "41892"
      },
      {
        "db": "PACKETSTORM",
        "id": "42016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "id": "VAR-200512-0289",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T20:48:01.737000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.8,
        "url": "http://docs.info.apple.com/article.html?artnum=302847"
      },
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/15647"
      },
      {
        "trust": 1.7,
        "url": "http://securitytracker.com/id?1015294"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/17813"
      },
      {
        "trust": 1.1,
        "url": "http://www.vupen.com/english/advisories/2005/2659"
      },
      {
        "trust": 0.6,
        "url": "http://www.frsirt.com/english/advisories/2005/2659"
      },
      {
        "trust": 0.3,
        "url": "http://software.cisco.com/download/navigator.html?mdfid=283613663"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005009pantherserver.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/15744/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005009tigerserver.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/14530/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/17813/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/16700/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/17193/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/96/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/15474/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005009tigerclient.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/17151/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/16502/"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/securityupdate2005009pantherclient.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3703"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3701"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3702"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3185"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3704"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2491"
      },
      {
        "trust": 0.1,
        "url": "http://docs.info.apple.com/article.html?artnum=61798"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2757"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2700"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3700"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2969"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-1993"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-3705"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2088"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/security/pgp/"
      },
      {
        "trust": 0.1,
        "url": "http://www.sudo.ws/sudo/alerts/path_race.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.openssl.org/news/secadv_20051011.txt."
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "db": "BID",
        "id": "16926"
      },
      {
        "db": "PACKETSTORM",
        "id": "41892"
      },
      {
        "db": "PACKETSTORM",
        "id": "42016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "db": "BID",
        "id": "16926"
      },
      {
        "db": "PACKETSTORM",
        "id": "41892"
      },
      {
        "db": "PACKETSTORM",
        "id": "42016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-12-01T00:00:00",
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "date": "2005-11-29T00:00:00",
        "db": "BID",
        "id": "16926"
      },
      {
        "date": "2005-11-30T18:27:13",
        "db": "PACKETSTORM",
        "id": "41892"
      },
      {
        "date": "2005-12-02T16:44:52",
        "db": "PACKETSTORM",
        "id": "42016"
      },
      {
        "date": "2005-06-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "date": "2005-12-01T02:07:00",
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-03-08T00:00:00",
        "db": "VULHUB",
        "id": "VHN-14910"
      },
      {
        "date": "2008-05-06T03:25:00",
        "db": "BID",
        "id": "16926"
      },
      {
        "date": "2005-12-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2005-3702"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Mac OS X  and  OS X Server Safari File download vulnerability",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "unknown",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-511"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.