First published: Tue Mar 30 2010(Updated: )
Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Server | =10.6.1 | |
Apple macOS Server | =10.6.2 | |
Apple iOS and macOS | =10.6.1 | |
Apple macOS Server | =10.6.0 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0534 has a moderate severity level due to its potential for unauthorized content publication.
To mitigate CVE-2010-0534, upgrade Apple Mac OS X to version 10.6.3 or later.
CVE-2010-0534 affects users of Apple Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
CVE-2010-0534 allows remote authenticated users to publish content via HTTP requests without proper access control.
No, CVE-2010-0534 is specifically relevant to Mac OS X versions prior to 10.6.3.