Design/Logic Flaw

2007-11-1501:46:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON

The remote_cmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from the tftpboot private directory to the root directory, which allows tftpd users to escape the private directory and access arbitrary files.

CPENameOperatorVersion
mac_os_xeq10.4.3
mac_os_xeq10.4.1
mac_os_xeq10.4.10
mac_os_xeq10.4.9
mac_os_xeq10.4.7
mac_os_xeq10.4.4
mac_os_xeq10.4.6
mac_os_xeq10.4.5
mac_os_xeq10.4.8
mac_os_xeq10.4.2

Name	Operator	Version
mac_os_x	eq	10.4.3
mac_os_x	eq	10.4.1
mac_os_x	eq	10.4.10
mac_os_x	eq	10.4.9
mac_os_x	eq	10.4.7
mac_os_x	eq	10.4.4
mac_os_x	eq	10.4.6
mac_os_x	eq	10.4.5
mac_os_x	eq	10.4.8
mac_os_x	eq	10.4.2