NetSight
high7.5

CVE-2010-0057

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass inte…

Impact

AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3
AppleMac Os X Server
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3

Weakness classification

References