NetSight
IP …
high7.5

CVE-2004-1083

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insens…

Impact

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.

Affected products

VendorProductAffected versions
AppleDarwin Streaming Server
Versions 4.1.3, 5.0.1
AppleQuicktime Streaming Server
Version 4.1.1
AppleMac Os X
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
AppleMac Os X Server
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5

Weakness classification

CWE-178

References