CVE-2004-1084 Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, wh...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
| apple darwin streaming server | = 5.0.1 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.1 | No fix listed |
| apple mac os x | = 10.2.2 | No fix listed |
| apple mac os x | = 10.2.3 | No fix listed |
| apple mac os x | = 10.2.4 | No fix listed |
| apple mac os x | = 10.2.5 | No fix listed |
| apple mac os x | = 10.2.6 | No fix listed |
| apple mac os x | = 10.2.7 | No fix listed |
| apple mac os x | = 10.2.8 | No fix listed |
| apple mac os x | = 10.3 | No fix listed |
| apple mac os x | = 10.3.1 | No fix listed |
| apple mac os x | = 10.3.2 | No fix listed |
| apple mac os x | = 10.3.3 | No fix listed |
| apple mac os x | = 10.3.4 | No fix listed |
| apple mac os x | = 10.3.5 | No fix listed |
| apple mac os x | = 10.3.6 | No fix listed |
| apple mac os x server | = 10.2 | No fix listed |
| apple mac os x server | = 10.2.1 | No fix listed |
| apple mac os x server | = 10.2.2 | No fix listed |
| apple mac os x server | = 10.2.3 | No fix listed |
| apple mac os x server | = 10.2.4 | No fix listed |
| apple mac os x server | = 10.2.5 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x server | = 10.2.6 | No fix listed |
| apple mac os x server | = 10.2.7 | No fix listed |
| apple mac os x server | = 10.2.8 | No fix listed |
| apple mac os x server | = 10.3 | No fix listed |
| apple mac os x server | = 10.3.1 | No fix listed |
| apple mac os x server | = 10.3.2 | No fix listed |
| apple mac os x server | = 10.3.3 | No fix listed |
| apple mac os x server | = 10.3.4 | No fix listed |
| apple mac os x server | = 10.3.5 | No fix listed |
| apple mac os x server | = 10.3.6 | No fix listed |
References
- APPLE-SA-2004-12-02 patch vendor-advisory
- APPLE-SA-2005-08-17 vendor-advisory
- APPLE-SA-2005-08-15 vendor-advisory
- 13362 patch third-party-advisory vendor-advisory
- P-049 government-resource patch third-party-advisory vendor-advisory
- 11802 vdb-entry
- apache-hfs-obtain-info(18349) vdb-entry