CVEvulnerability
CVE-2010-0545
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.
Affected configurations
• apple mac os x 10.5.8
• apple mac os x 10.6.0
• apple mac os x 10.6.1
• apple mac os x 10.6.2
• apple mac os x 10.6.3
• apple mac os x server 10.5.8
• apple mac os x server 10.6.0
• apple mac os x server 10.6.1
• apple mac os x server 10.6.2
• apple mac os x server 10.6.3
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html Vendor Advisory
- http://secunia.com/advisories/40220 Vendor Advisory
- http://securitytracker.com/id?1024103 securitytracker.com
- http://support.apple.com/kb/HT4188 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/40871 Patch
- http://www.vupen.com/english/advisories/2010/1481 Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html Vendor Advisory
- http://secunia.com/advisories/40220 Vendor Advisory
- http://securitytracker.com/id?1024103 securitytracker.com
- http://support.apple.com/kb/HT4188 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/40871 Patch
- http://www.vupen.com/english/advisories/2010/1481 Patch, Vendor Advisory