Multiple serious vulnerabilities have been found in Apple OS X Server. Malicious users can exploit these vulnerabilities to bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited remotely via vectors related to Wiki Server;
2. Improper pathname can be exploited remotely via a specially designed packets;
3. Obsolete OpenSSL version can be exploited remotely via a padding-oracle attack.

Apple OS X Server versions earlier than 4.1

Update to the latest version
Get OS X Server

Apple article