CVE-2005-3712

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes.

Metrics

CVSS 2.0 6.5/10AV:N/AC:L/Au:S/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://www.osvdb.org/23648
http://www.securityfocus.com/bid/16907Patch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25029
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://www.osvdb.org/23648
http://www.securityfocus.com/bid/16907Patch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25029

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-37137.5Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a cra CVE-2005-37145.0The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows r CVE-2005-37157.5Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allo CVE-2005-37167.5The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that ca CVE-2005-37177.5The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and pas CVE-2005-37187.5UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) th CVE-2005-37194.6Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtai CVE-2005-37205.0The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.CVE-2005-37215.0The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configura CVE-2005-37227.5The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration CVE-2005-37237.5Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attacke CVE-2005-37246.4Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of servi