CVE-2005-1332

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=301381Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/May/msg00001.htmlVendor Advisory
http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
http://www.kb.cert.org/vuls/id/258390US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-136A.htmlUS Government Resource
http://docs.info.apple.com/article.html?artnum=301381Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/May/msg00001.htmlVendor Advisory
http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
http://www.kb.cert.org/vuls/id/258390US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-136A.htmlUS Government Resource

Timeline

Published: May 4, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-13335.0Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to re CVE-2005-13357.2Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external h CVE-2005-13364.6Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable CVE-2005-13377.5Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive priv CVE-2005-13384.6Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in p CVE-2005-13397.5lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.CVE-2005-13407.5The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use CVE-2005-13415.1Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.CVE-2005-13427.5The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote atta CVE-2005-13437.2Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (CVE-2005-13447.5Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest CVE-2005-13457.5Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, wh