Description
Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
References
- 11802 vdb-entry
- 13362 third-party-advisory
- apache-hfs-obtain-info(18349) vdb-entry
- APPLE-SA-2005-08-15 vendor-advisory
- APPLE-SA-2004-12-02 vendor-advisory
- APPLE-SA-2005-08-17 vendor-advisory
- P-049 third-party-advisory government-resource