CVE-2010-0545: Medium severity Apple iOS and macOS vulnerability
Published Jun 17, 2010
·Updated
The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.
Affected Software
10 affected components
Apple iOS and macOS=10.5.8
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.6.3
Apple iOS and macOS=10.6.3
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jun 17, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-0545?
CVE-2010-0545 is classified as a medium severity vulnerability due to its impact on user access rights.
2
How do I fix CVE-2010-0545?
To fix CVE-2010-0545, update your system to Apple Mac OS X 10.6.4 or later, which addresses this issue.
3
Which versions of Mac OS X are affected by CVE-2010-0545?
CVE-2010-0545 affects Mac OS X versions 10.5.8 and 10.6.0 through 10.6.3.
4
What is the impact of exploiting CVE-2010-0545?
Exploitation of CVE-2010-0545 allows local users to bypass intended file access restrictions.
5
Is CVE-2010-0545 a remote or local vulnerability?
CVE-2010-0545 is a local vulnerability that requires access to the affected system for exploitation.