PT-2010-1888 · Apple · Macos X

Gerrit Dewitt · Published 2010-03-30 · Updated 2010-03-31 · CVE-2010-0064

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.3

Description The issue allows local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users, due to the preservation of file ownership during an authenticated Finder copy.

Recommendations For Apple Mac OS X versions prior to 10.6.3, update to version 10.6.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0064

Affected Products

Macos X

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-0064 · Security Note
• http://support.apple.com/kb/HT4077 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory