CVE-2015-3674
published 2015-07-03CVE-2015-3674: afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.25%
87.0th percentile
afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | <= 10.10.3 | — |
| apple | os_x_yosemite_v10.10.4_and_security_update_2015-005 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2015-3674: OS X Yosemite v10.10.4 and Security Update 2015-005
vendor_apple·CVSS 7.5
CVE-2015-3674 [HIGH] CVE-2015-3674: OS X Yosemite v10.10.4 and Security Update 2015-005
Apple Security Update: About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005
Product: OS X Yosemite v10.10.4 and Security Update 2015-005
CVE: CVE-2015-3674
Component: CVE-ID
Impact: An attacker may be able to access directories that are protected with HTTP authentication without knowing the correct credentials
Description: The default Apache configuration did not include mod_hfs_apple. If Apache was manually enabled and the configuration was not changed, some files that should not be accessible might have been accessible using a specially crafted URL. This issue was addressed by enabling mod_hfs_apple.
GHSA
GHSA-f39p-f249-frmv: afpserver in Apple OS X before 10
ghsa_unreviewed·2022-05-17
CVE-2015-3674 [HIGH] CWE-119 GHSA-f39p-f249-frmv: afpserver in Apple OS X before 10
afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlhttp://support.apple.com/kb/HT204942http://www.securityfocus.com/bid/75493http://www.securitytracker.com/id/1032760http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlhttp://support.apple.com/kb/HT204942http://www.securityfocus.com/bid/75493http://www.securitytracker.com/id/1032760
2015-07-03
Published