Vulnerability in Apple Mac OS X Server
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."
EPSS: 0.003 (17.4th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x_server — versions 10.4, 10.4.1
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)