4.4

CVE-2010-0545

EPSS 0.07%
Published 17.06.2010 16:30:01
Last modified 11.04.2025 00:51:21
Source product-security@apple.com
Teams watchlist Login
Open Login

The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS X Version10.5.8

Apple ≫ macOS X Version10.6.0

Apple ≫ macOS X Version10.6.1

Apple ≫ macOS X Version10.6.2

Apple ≫ macOS X Version10.6.3

Apple ≫ macOS X Server Version10.5.8

Apple ≫ macOS X Server Version10.6.0

Apple ≫ macOS X Server Version10.6.1

Apple ≫ macOS X Server Version10.6.2

Apple ≫ macOS X Server Version10.6.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.181

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Vendor Advisory

http://secunia.com/advisories/40220

Vendor Advisory

http://support.apple.com/kb/HT4188

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1481

Patch

Vendor Advisory

http://www.securityfocus.com/bid/40871

Patch

http://securitytracker.com/id?1024103

https://nvd.nist.gov/vuln/detail/CVE-2010-0545

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0545

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0545

EUVD