Apple Macos Server vulnerabilities

CVE-2017-10979 [CRITICAL] CVE-2017-10979: macOS Server 5.4 Apple Security Update: About the security content of macOS Server 5.4 Product: macOS Server Version: 5.4 CVE: CVE-2017-10979 Component: CVE-2017-10979

CVE-2007-6750 [MEDIUM] CVE-2007-6750: macOS Server 5.3 Apple Security Update: About the security content of macOS Server 5.3 Product: macOS Server Version: 5.3 CVE: CVE-2007-6750 Component: CVE-2007-6750

CVE-2016-4694 [CRITICAL] CVE-2016-4694: macOS Server 5.2 Apple Security Update: About the security content of macOS Server 5.2 Product: macOS Server Version: 5.2 CVE: CVE-2016-4694 Component: About Apple security updates Impact: A remote attacker may be able to proxy traffic through an arbitrary server Description: An issue existed in the handling of the HTTP_PROXY environment variable. This issue was addressed by not setting the HTTP_PROXY environment variable from CGI.

CVE-2016-0751 [HIGH] CVE-2016-0751: macOS Server 5.3 Apple Security Update: About the security content of macOS Server 5.3 Product: macOS Server Version: 5.3 CVE: CVE-2016-0751 Component: CVE-2016-0751

CVE-2016-4754 [HIGH] CVE-2016-4754: macOS Server 5.2 Apple Security Update: About the security content of macOS Server 5.2 Product: macOS Server Version: 5.2 CVE: CVE-2016-4754 Component: ServerDocs Server Impact: An attacker may be able to exploit weaknesses in the RC4 cryptographic algorithm Description: RC4 was removed as a supported cipher.

CVE-2017-2382 [HIGH] CVE-2017-2382: macOS Server 5.3 Apple Security Update: About the security content of macOS Server 5.3 Product: macOS Server Version: 5.3 CVE: CVE-2017-2382 Component: Wiki Server Impact: A remote attacker may be able to enumerate users Description: An access issue was addressed through improved permissions checking.

CVE-2017-10978 [HIGH] CVE-2017-10978: macOS Server 5.4 Apple Security Update: About the security content of macOS Server 5.4 Product: macOS Server Version: 5.4 CVE: CVE-2017-10978 Component: CVE-2017-10978

CVE-2020-9995 [MEDIUM] CWE-79 CVE-2020-9995: An issue existed in the parsing of URLs. This issue was addressed with improved input validation. Th An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.

CVE-2017-13826 [HIGH] CVE-2017-13826: macOS Server 5.4 Apple Security Update: About the security content of macOS Server 5.4 Product: macOS Server Version: 5.4 CVE: CVE-2017-13826 Component: Postfix Impact: Multiple issues in Postfix Description: Multiple issues were addressed by updating to version 3.2.2.