CVE-2011-0178
23.03.2011, 02:00
The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 𝑥 ≤ 10.6.6 |
| apple | mac_os_x | 10.6.0 |
| apple | mac_os_x | 10.6.1 |
| apple | mac_os_x | 10.6.2 |
| apple | mac_os_x | 10.6.3 |
| apple | mac_os_x | 10.6.4 |
| apple | mac_os_x | 10.6.5 |
| apple | carboncore | * |
| apple | mac_os_x_server | 𝑥 ≤ 10.6.6 |
| apple | mac_os_x_server | 10.6.0 |
| apple | mac_os_x_server | 10.6.1 |
| apple | mac_os_x_server | 10.6.2 |
| apple | mac_os_x_server | 10.6.3 |
| apple | mac_os_x_server | 10.6.4 |
| apple | mac_os_x_server | 10.6.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration