First published: Fri Mar 03 2006(Updated: )
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.4.3 | |
Apple Mac OS X Server | =10.4.3 | |
Apple Mac OS X Server | =10.3.2 | |
Apple Mac OS X Server | =10.3.7 | |
Apple Mac OS X Server | =10.3.5 | |
macOS Yosemite | =10.3.1 | |
macOS Yosemite | =10.3.5 | |
macOS Yosemite | =10.4.1 | |
Apple Mac OS X Server | =10.4.2 | |
Apple Mac OS X Server | =10.3.3 | |
Apple Mac OS X Server | =10.4.4 | |
Apple Mac OS X Server | =10.4.1 | |
macOS Yosemite | =10.4.4 | |
Apple Mac OS X Server | =10.3.4 | |
macOS Yosemite | =10.3.2 | |
macOS Yosemite | =10.3.7 | |
Apple Mac OS X Server | =10.4 | |
Apple Mac OS X Server | =10.4.5 | |
macOS Yosemite | =10.3.6 | |
Apple Mac OS X Server | =10.3 | |
Apple Mac OS X Server | =10.3.8 | |
macOS Yosemite | =10.4 | |
Apple Mac OS X Server | =10.3.9 | |
macOS Yosemite | =10.3.8 | |
Apple Mac OS X Server | =10.3.1 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.3.9 | |
macOS Yosemite | =10.3.4 | |
macOS Yosemite | =10.3.3 | |
macOS Yosemite | =10.4.2 | |
macOS Yosemite | =10.3 | |
Apple Mac OS X Server | =10.3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-0386 is considered a medium severity vulnerability due to its potential to allow unauthorized access to protected files.
To fix CVE-2006-0386, ensure that you upgrade your Mac OS X to a version later than 10.4.5.
CVE-2006-0386 affects Mac OS X versions 10.4.5 and earlier.
CVE-2006-0386 exploits a vulnerability in the way FileVault mounts user directories, allowing local users to access protected files.
Yes, local users can potentially bypass FileVault protections if they are on an affected version of Mac OS X.