4.4

CVE-2010-0545

EPSS 0.07%
Veröffentlicht 17.06.2010 16:30:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ macOS X Version10.5.8

Apple ≫ macOS X Version10.6.0

Apple ≫ macOS X Version10.6.1

Apple ≫ macOS X Version10.6.2

Apple ≫ macOS X Version10.6.3

Apple ≫ macOS X Server Version10.5.8

Apple ≫ macOS X Server Version10.6.0

Apple ≫ macOS X Server Version10.6.1

Apple ≫ macOS X Server Version10.6.2

Apple ≫ macOS X Server Version10.6.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.181

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Vendor Advisory

http://secunia.com/advisories/40220

Vendor Advisory

http://support.apple.com/kb/HT4188

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1481

Patch

Vendor Advisory

http://www.securityfocus.com/bid/40871

Patch

http://securitytracker.com/id?1024103

https://nvd.nist.gov/vuln/detail/CVE-2010-0545

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0545

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0545

EUVD