Mac OS X Server contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the AFP server stores client reconnect keys as world-readable files, which will disclose client session information resulting in a loss of confidentiality.
Classification
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Unknown
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch (Security Update 2006-004) to address this vulnerability.
