CVE-2004-1083 Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attacke...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
| apple darwin streaming server | = 5.0.1 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.1 | No fix listed |
| apple mac os x | = 10.2.2 | No fix listed |
| apple mac os x | = 10.2.3 | No fix listed |
| apple mac os x | = 10.2.4 | No fix listed |
| apple mac os x | = 10.2.5 | No fix listed |
| apple mac os x | = 10.2.6 | No fix listed |
| apple mac os x | = 10.2.7 | No fix listed |
| apple mac os x | = 10.2.8 | No fix listed |
| apple mac os x | = 10.3 | No fix listed |
| apple mac os x | = 10.3.1 | No fix listed |
| apple mac os x | = 10.3.2 | No fix listed |
| apple mac os x | = 10.3.3 | No fix listed |
| apple mac os x | = 10.3.4 | No fix listed |
| apple mac os x | = 10.3.5 | No fix listed |
| apple mac os x | = 10.3.6 | No fix listed |
| apple mac os x server | = 10.2 | No fix listed |
| apple mac os x server | = 10.2.1 | No fix listed |
| apple mac os x server | = 10.2.2 | No fix listed |
| apple mac os x server | = 10.2.3 | No fix listed |
| apple mac os x server | = 10.2.4 | No fix listed |
| apple mac os x server | = 10.2.5 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x server | = 10.2.6 | No fix listed |
| apple mac os x server | = 10.2.7 | No fix listed |
| apple mac os x server | = 10.2.8 | No fix listed |
| apple mac os x server | = 10.3 | No fix listed |
| apple mac os x server | = 10.3.1 | No fix listed |
| apple mac os x server | = 10.3.2 | No fix listed |
| apple mac os x server | = 10.3.3 | No fix listed |
| apple mac os x server | = 10.3.4 | No fix listed |
| apple mac os x server | = 10.3.5 | No fix listed |
| apple mac os x server | = 10.3.6 | No fix listed |
References
- APPLE-SA-2004-12-02 mailing-list patch vendor-advisory
- APPLE-SA-2005-08-17 mailing-list vendor-advisory
- APPLE-SA-2005-08-15 mailing-list vendor-advisory
- 13362 broken-link patch third-party-advisory vendor-advisory
- P-049 broken-link government-resource patch third-party-advisory vendor-advisory
- 11802 broken-link third-party-advisory vdb-entry
- apache-hfs-file-disclosure(18348) third-party-advisory vdb-entry