Apple Xsan vulnerabilities

2 CVEs affecting Apple Xsan, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2201, published 2009-09-15.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3506, published 2006-08-21. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to…
• CVE-2009-2201, published 2009-09-15. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to…