Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1446
mac os x
find-by-content
.fbcindex
remote attack
file access
cve-2001-1446
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories.
Affected configurations
Node
applemac_os_xMatch10.0
ORapplemac_os_xMatch10.0.1
ORapplemac_os_xMatch10.0.2
ORapplemac_os_xMatch10.0.3
ORapplemac_os_xMatch10.0.4
Related
cvelist
cvelist
CVE-2001-1446
2005-04-21 04:00:00
openvas
openvas
MacOS X Finder reveals contents of Apache Web files
2005-11-03 00:00:00
MacOS X Finder '.FBCIndex' Information Disclosure
2005-11-03 00:00:00
MacOS X Finder reveals contents of Apache Web directories
2005-11-03 00:00:00
nessus
nessus
Apple Mac OS X Find-By-Content .DS_Store Web Directory Listing
2001-09-14 00:00:00
nvd
nvd
CVE-2001-1446
2001-09-11 04:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2001-1446