Lucene search
HistoryFeb 27, 2014 - 1:55 a.m.
CVE-2014-1264
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0
Percentile
5.1%
Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allows local users to bypass intended access restrictions in opportunistic circumstances via standard filesystem operations on a file with a damaged ACL.
Affected configurations
Node
applemac_os_xRange≤10.9.1
ORapplemac_os_xMatch10.9
References
Related
seebug
seebug
Apple Mac OS Finder ACL破坏未授权访问漏洞
2014-02-28 00:00:00
Apple Mac OS X多个安全漏洞(APPLE-SA-2014-02-25-1)
2014-02-26 00:00:00
cvelist
cvelist
CVE-2014-1264
2014-02-27 01:00:00
cve
cve
CVE-2014-1264
2014-02-27 01:55:04
prion
prion
Design/Logic Flaw
2014-02-27 01:55:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities -07 (Sep 2014)
2014-09-22 00:00:00
nessus
nessus
Mac OS X 10.9.x < 10.9.2 Multiple Vulnerabilities
2014-02-25 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001
2014-02-28 00:00:00
Apple Mac OS X multiple security vulnerabilities
2014-02-28 00:00:00
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2014-1264