Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.0 (including) | 10.0 (including) |
| Mac_os_x | Apple | 10.0.1 (including) | 10.0.1 (including) |
| Mac_os_x | Apple | 10.0.2 (including) | 10.0.2 (including) |
| Mac_os_x | Apple | 10.0.3 (including) | 10.0.3 (including) |
| Mac_os_x | Apple | 10.0.4 (including) | 10.0.4 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html
- http://www.kb.cert.org/vuls/id/177243
- http://www.securityfocus.com/bid/3325
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7103
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html
- http://www.kb.cert.org/vuls/id/177243
- http://www.securityfocus.com/bid/3325
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7103