Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0503 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T16:23:38.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0504 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T04:13:50.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0505 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:18.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510539/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.zerodayinitiative.com/advisories/
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.zerodayinitiative.com/advisories/ZDI-10-058 - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0506 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T01:17:05.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0507 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T00:42:07.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0508 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T04:09:39.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0509 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T17:59:51.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0510 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T23:31:36.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0511 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T18:14:22.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0512 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39153 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0513 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39151 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077 - http://osvdb.org/63409
CVE ID: CVE-2010-0514 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7043 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http
rity-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0515 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6783 - http://suppo
g00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6783 - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0516 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:18.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7062 - http://www.securityfocus.com/archive/1/510513/
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7062 - http://www.securityfocus.com/archive/1/510513/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://www.zerodayinitiative.com/advisories/ZDI-10-040 - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0517 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6673 - ht
ontainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6673 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://www.zerodayinitiative.com/advisories/ZDI-10-037 - http://support.apple.com/kb/HT4077 - http://www.securityfocus.com/archive/1/510511/100/0/threaded
CVE ID: CVE-2010-0518 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://support.apple.com/kb/HT4077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
/msg00002.html - http://support.apple.com/kb/HT4077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7077
CVE ID: CVE-2010-0519 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.securityfocus.com/archive/1/510519/100/0/threaded - http://lists.apple.com/archives/security-announce/201
l - http://www.securityfocus.com/archive/1/510519/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7498 - http://support.apple.com/kb/HT4077 - http://www.zerodayinitiative.com/advisories/ZDI-10-043
CVE ID: CVE-2010-0520 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-044 - http://lists.apple.com/archives/security-announce/2010//
ces: - http://www.zerodayinitiative.com/advisories/ZDI-10-044 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6801 - http://www.securityfocus.com/archive/1/510520/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0521 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T19:15:43.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0522 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T03:18:25.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0523 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T00:00:51.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0524 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39234 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0525 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T16:42:39.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail recipient, which might make it easier for remote attackers to obtain sensitive information via a brute-force attack on a weakly encrypted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0526 State: PUBLISHED Published: 2010-03-30T18:00:00 Last Updated: 2024-08-07T00:52:19.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510530/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-045 - http://lists.apple.com/archives/s
ive/1/510530/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-045 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6927 - http://www.zerodayinitiative.com/advisories/ZDI-10-035 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://www.securityfocus.com/archive/1/510508/100/0/threaded - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0527 State: PUBLISHED Published: 2010-03-31T18:00:00 Last Updated: 2024-08-07T00:52:19.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7458
CVE ID: CVE-2010-0528 State: PUBLISHED Published: 2010-03-31T18:00:00 Last Updated: 2024-08-07T00:52:19.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6989 - http://www.securityfocus.com/archive/1/510518/100/0/threaded - http://
h/definition/oval%3Aorg.mitre.oval%3Adef%3A6989 - http://www.securityfocus.com/archive/1/510518/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://www.zerodayinitiative.com/advisories/ZDI-10-042
CVE ID: CVE-2010-0529 State: PUBLISHED Published: 2010-03-31T18:00:00 Last Updated: 2024-08-07T00:52:19.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780 - http://www.securityfocus.com/archive/1/510569/100/0/threaded
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780 - http://www.securityfocus.com/archive/1/510569/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-067 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html
CVE ID: CVE-2010-0530 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T00:52:19.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16036 - http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html - http://support.apple.com/kb/HT4447 - http://www.securitytracker.com/id?102
s/security-announce/2010//Dec/msg00000.html - http://support.apple.com/kb/HT4447 - http://www.securitytracker.com/id?1024829
CVE ID: CVE-2010-0531 State: PUBLISHED Published: 2010-03-31T18:00:00 Last Updated: 2024-08-07T00:52:19.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7427 - http://secunia.com/advisories/39135 - http://support.apple.com/kb/HT4105 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html
CVE ID: CVE-2010-0532 State: PUBLISHED Published: 2010-03-31T18:00:00 Last Updated: 2024-08-07T00:52:19.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7110 - http://secunia.com/advisories/39135 - http://support.apple.com/kb/HT4105 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html
CVE ID: CVE-2010-0533 State: PUBLISHED Published: 2010-03-30T17:00:00Z Last Updated: 2024-09-16T23:01:34.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0534 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T00:25:57.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0535 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T23:22:11.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077