Apple Afp Server vulnerabilities

4 CVEs affecting Apple Afp Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-1721, published 2005-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0340, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet.
CVE-2005-1721, published 2005-06-16. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code.
CVE-2003-0379, published 2003-07-24. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files.
CVE-2005-1720, published 2005-06-16. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file…