Multiple vulnerabilities in OS X Server

Description

Multiple serious vulnerabilities have been found in Apple OS X Server. Malicious users can exploit these vulnerabilities to bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited remotely via vectors related to Wiki Server;
2. Improper pathname can be exploited remotely via a specially designed packets;
3. Obsolete OpenSSL version can be exploited remotely via a padding-oracle attack.

Original advisories

• Apple article

Exploitation

Public exploits exist for this vulnerability.

Related products

• Apple-OS-X

CVE list

• CVE-2014-3566
  warning
• CVE-2015-1151
  warning
• CVE-2015-1150
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com