Lucene search
HistoryJun 17, 2010 - 4:30 p.m.
CVE-2010-0545
mac os x
finder
desktopservices
cve-2010-0545
access restrictions
5.9 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an “Apply to enclosed items” action, which allows local users to bypass intended access restrictions via normal filesystem operations.
Related
prion
prion
Design/Logic Flaw
2010-06-17 16:30:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 April-2017
2017-04-18 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2010-004)
2010-06-15 00:00:00
Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities
2010-06-15 00:00:00
5.9 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2010-0545