NetSight
IP …
medium5.0

CVE-2004-1084

Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names rel…

Impact

Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.

Affected products

VendorProductAffected versions
AppleDarwin Streaming Server
Versions 4.1.3, 5.0.1
AppleQuicktime Streaming Server
Version 4.1.1
AppleMac Os X
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
AppleMac Os X Server
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5

References