Skip to main content

Os X Server CVE-2015-1150

MEDIUM
DEPRECATED: Code (CWE-17)
2015-04-28 product-security@apple.com
Apple Authentication Bypass Os X Server
5.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 28, 2015 - 22:59 cve.org
MEDIUM 5.0

DescriptionCVE.org

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended.

AnalysisAI

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-17. The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended. Affected products include: Apple Os X Server. Version information: before 4.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Os X Server

View all
CVE-2014-3583 MEDIUM
5.0 Dec 15

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows rem
CVE-2016-4694 CRITICAL
9.1 Sep 25

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefo
CVE-2014-4424 HIGH
7.5 Sep 19

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 a
CVE-2016-4754 HIGH
7.5 Sep 25

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat

CVE-2013-5143 MEDIUM
6.8 Oct 24

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified cir
CVE-2014-4406 MEDIUM
6.1 Sep 19

Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows r
CVE-2015-1151 MEDIUM
5.0 Apr 28

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and Peop
CVE-2013-1034 MEDIUM
4.3 Sep 19

Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote at
CVE-2014-4446 LOW
2.1 Oct 18

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows r
CVE-2014-4447 LOW
1.9 Oct 18

Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file aft

Same weakness CWE-17 – DEPRECATED: Code

View all
CVE-2015-0240 CRITICAL POC
10.0
CVE-2014-9222 CRITICAL POC
10.0
CVE-2014-9707 HIGH POC
7.5
CVE-2015-3292 CRITICAL POC
10.0
CVE-2015-2682 MEDIUM POC
5.0
CVE-2015-4335 CRITICAL POC
10.0
CVE-2015-1728 CRITICAL
9.3
CVE-2014-9296 MEDIUM POC
5.0

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2015-1150 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy