Apple OS X Server 3.0.2

CPE Details

Apple OS X Server 3.0.2
apple
os_x_server
3.0.2
2015-12-23
19h38 +00:00
2015-12-23
19h38 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:apple:os_x_server:3.0.2:*:*:*:*:*:*:*

Informations

Vendor

apple

Product

os_x_server

Version

3.0.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2016-4694 2016-09-25 08h00 +00:00 The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue, a related issue to CVE-2016-5387.
9.1
Critical
CVE-2016-4754 2016-09-25 08h00 +00:00 ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
7.5
High
CVE-2015-1150 2015-04-28 20h00 +00:00 The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended.
5
CVE-2015-1151 2015-04-28 20h00 +00:00 Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client.
5
CVE-2014-4446 2014-10-17 23h00 +00:00 Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.
2.1
CVE-2014-4447 2014-10-17 23h00 +00:00 Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.
1.9
CVE-2014-4406 2014-09-19 08h00 +00:00 Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
6.1
Medium
CVE-2014-4424 2014-09-19 08h00 +00:00 SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
7.5