CVE-2005-1720: Low severity Apple AFP Server vulnerability
AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1720?
CVE-2005-1720 is classified as a moderate severity vulnerability.
How do I fix CVE-2005-1720?
To address CVE-2005-1720, ensure that all files are copied to directories that support ACLs or update systems to patched versions of the AFP Server.
What systems are affected by CVE-2005-1720?
CVE-2005-1720 affects the AFP Server on Mac OS X 10.4.1 when using ACL enabled volumes.
What are the consequences of CVE-2005-1720?
Exploitation of CVE-2005-1720 may lead to improper permissions being applied to files, potentially exposing sensitive data.
Is there a workaround for CVE-2005-1720?
A potential workaround for CVE-2005-1720 is to avoid copying files to non-ACL directories when using ACL enabled volumes.