Vulnerability in Apple Mac Os X

CVE-2004-0922

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.2, 10.2.1, 10.2.2
Apple Mac_os_x_server — versions 10.2, 10.2.1, 10.2.2
Apple Quicktime — versions 5.0.2, 6.0, 6.1
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)