OSVDB ID: 20427

Title: Apple Mac OS X Finder File Permission Display Weakness

Info

Disclosure

Oct 28, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

File and group permissions in Mac OS X are may be misleading. The problem is that the Finder application does not properly display the actual file and group permissions in the 'Get Info' window, which may allow a malicious user to hide the actual permissions.

Classification

Location: Local Access Required
Attack Type: Attack Type Unknown
Impact: Impact Unknown
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Concern

Solution

Upgrade to version 10.4.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Apple Computer, Inc.

Mac OS X

10.4.2

Mac OS X Server

10.4.2

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/36218