CVE-2006-1457: Low severity Apple Mac OS X Server vulnerability
Published May 12, 2006
·Updated
Safari on Apple Mac OS X 10.4.6, when "Open safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.
Affected Software
2 affected components
Apple Mac OS X Server=10.4.6
Apple iOS and macOS=10.4.6
Remediation
Event History
May 12, 2006
CVE Published
09:02 PM
May 13, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1457?
CVE-2006-1457 has a moderate severity level as it allows attackers to overwrite arbitrary files on the system.
2
How do I fix CVE-2006-1457?
To mitigate CVE-2006-1457, disable the 'Open safe files after downloading' option in Safari preferences.
3
Which versions of macOS are affected by CVE-2006-1457?
CVE-2006-1457 affects Mac OS X 10.4.6 and Mac OS X Server 10.4.6.
4
What type of attack does CVE-2006-1457 enable?
CVE-2006-1457 enables a file overwrite attack through maliciously crafted archives containing symlinks.
5
Is CVE-2006-1457 an issue for later versions of macOS?
CVE-2006-1457 specifically impacts macOS version 10.4.6 and does not affect later versions.