← Vulnerability feed

Vulnerability record · CVE-2005-2507 · published 19 August 2005

CVE-2005-2507: Apple mac os x server vulnerability

Apple · Mac Os X Server

Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

7.5 CVSS 2.0 High EPSS 6.2% · top 6.8%
7.5CVSS 2.0 base score
6.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Patch
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html Patch
http://www.kb.cert.org/vuls/id/913820 PatchThird Party AdvisoryUS Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.html PatchThird Party AdvisoryUS Government Resource
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html Patch
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html Patch
http://www.kb.cert.org/vuls/id/913820 PatchThird Party AdvisoryUS Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.html PatchThird Party AdvisoryUS Government Resource

Track CVE-2005-2507 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-5911Apple mac os x server vulnerabilityMultiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML…EPSS 2.0%10.0CVE-2010-0055Apple mac os x vulnerabilityxar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified packa…EPSS 2.0%10.0CVE-2010-0508Apple mac os x vulnerabilityMail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attac…EPSS 1.5%10.0CVE-2010-1119Apple safari vulnerabilityUse-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and …EPSS 19%10.0CVE-2009-2193Apple mac os x memory buffer overflow vulnerabilityBuffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (sy…EPSS 9.5%10.0CVE-2009-1236Apple mac os x memory buffer overflow vulnerabilityHeap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attacker…EPSS 8.4%10.0CVE-2009-0138Apple mac os x improper authentication vulnerabilityservermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify t…EPSS 4.2%10.0CVE-2009-0012Apple mac os x memory buffer overflow vulnerabilityHeap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.EPSS 5.4%

Source: NIST National Vulnerability Database (record CVE-2005-2507), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.