Skip to content
OpenAdvisories
Unscored CVE-2004-0922 EUVD-2004-0920GHSA-gc83-hgxm-cpmx

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a w…

Published Oct 28, 2004 · Updated Sep 17, 2024 · Assigned by mitre

Description

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.

References