Unscored CVE-2010-0545 EUVD-2010-0576GHSA-6g4r-52jh-xv73

The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply …

Published Jun 17, 2010 · Updated Sep 16, 2024 · Assigned by apple

Description

The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.

References

APPLE-SA-2010-06-15-1 vendor-advisory
ADV-2010-1481 vdb-entry
40871 vdb-entry
1024103 vdb-entry
http://support.apple.com/kb/HT4188
40220 third-party-advisory