PT-2008-4994 · Apple · Macos X

Published 2008-09-16 · Updated 2017-08-08 · CVE-2008-3618

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5 through 10.5.4

Description The issue concerns the File Sharing pane in the Sharing preference pane, which does not properly inform users about the scope of file sharing. Specifically, it fails to notify users that the complete contents of their own home directories are shared for their own use. This lack of transparency might allow attackers to exploit other vulnerabilities and access files that the user did not intend to share.

Recommendations For Mac OS X versions 10.5 through 10.5.4, consider restricting file sharing to only the intended directories and files to minimize the risk of unintended access. As a temporary workaround, users should be cautious about the files stored in their home directories, ensuring that sensitive information is not inadvertently shared.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-3618

Affected Products

Macos X

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3618 · Security Note
• http://kb.cert.org/vuls/id/126787 · Patch
• http://securityfocus.com/bid/31189 · Patch
• http://us-cert.gov/cas/techalerts/TA08-260A.html · Note
• http://vupen.com/english/advisories/2008/2584 · Note
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1020883 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45175 · Note