OSVDB ID: 13617

Title: Apple Mac OS X Finder .DS_Store Hard Link Arbitrary File Manipulation

Info

Disclosure
Feb 07, 2005

Discovery
Unknown

Dates

Exploit
Feb 07, 2005

Solution
Unknown

Description

 Mac OS X contains a flaw that may allow a malicious user to arbitrary manipulate files. The issue is triggered due to the insecure creation of '.DS_Store' files. By creating a hard link to point to any file on the system, a malicious user could arbitrary manipulate files resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Inc.

Mac OS X

 10.3
10.3.1
10.3.2
10.3.4
10.3.3
10.3.5
10.3.6
10.3.7
10.3.8
10.3.9

References

Credit
  • Vade 79 - v9fakehalo.deadpig.org -


Direct URL: http://osvdb.org/13617