First published: Tue Mar 30 2010(Updated: )
DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Server | =10.6.1 | |
Apple macOS Server | =10.6.2 | |
Apple iOS and macOS | =10.6.1 | |
Apple macOS Server | =10.6.0 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0064 is considered a high severity vulnerability due to its potential to allow local users to bypass disk-quota restrictions.
To remediate CVE-2010-0064, upgrade to Apple Mac OS X 10.6.3 or later.
CVE-2010-0064 affects Apple Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
CVE-2010-0064 may allow local users to copy files owned by other users, compromising the integrity of file ownership and security.
CVE-2010-0064 is a local vulnerability, as it requires authenticated access to the affected system.