Description
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users.
References
- macosx-afp-file-access(28136) vdb-entry
- APPLE-SA-2006-08-01 vendor-advisory
- ADV-2006-3101 vdb-entry
- 21253 third-party-advisory
- 19289 vdb-entry
- TA06-214A third-party-advisory
- VU#168020 third-party-advisory
- 1016620 vdb-entry
- 27732 vdb-entry