Unscored CVE-2004-1083 EUVD-2004-1081GHSA-q8p7-6fhh-3h44

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses fi…

Published Apr 14, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.

References

11802 vdb-entry
13362 third-party-advisory
APPLE-SA-2005-08-15 vendor-advisory
APPLE-SA-2004-12-02 vendor-advisory
apache-hfs-file-disclosure(18348) vdb-entry
APPLE-SA-2005-08-17 vendor-advisory
P-049 third-party-advisory government-resource