low2.1
CVE-2011-0178
The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag…
Impact
The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.6.6 Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |
| Apple | Carboncore | All versions |
| Apple | Mac Os X Server | through 10.6.6 Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |