CVE-2006-0386: Low severity Apple iOS and macOS vulnerability
Published Mar 3, 2006
·Updated
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.
Affected Software
32 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.3.2
Apple Mac OS X Server=10.3.7
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.3.3
Apple Mac OS X Server=10.4.4
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.3.7
Apple Mac OS X Server=10.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.3.6
Apple Mac OS X Server=10.3
Apple Mac OS X Server=10.3.8
Apple iOS and macOS=10.4
Apple Mac OS X Server=10.3.9
Apple iOS and macOS=10.3.8
Apple Mac OS X Server=10.3.1
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.3
Apple Mac OS X Server=10.3.6
Remediation
Patch Available
Patch Available
Event History
Mar 3, 2006
CVE Published
10:02 PM
Mar 4, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0386?
CVE-2006-0386 is considered a medium severity vulnerability due to its potential to allow unauthorized access to protected files.
2
How do I fix CVE-2006-0386?
To fix CVE-2006-0386, ensure that you upgrade your Mac OS X to a version later than 10.4.5.
3
Which versions of Mac OS X are affected by CVE-2006-0386?
CVE-2006-0386 affects Mac OS X versions 10.4.5 and earlier.
4
What does CVE-2006-0386 exploit in FileVault?
CVE-2006-0386 exploits a vulnerability in the way FileVault mounts user directories, allowing local users to access protected files.
5
Can local users bypass FileVault due to CVE-2006-0386?
Yes, local users can potentially bypass FileVault protections if they are on an affected version of Mac OS X.