Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2004-12-03 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-1083
Mitre link : CVE-2004-1083
CVE.ORG link : CVE-2004-1083
JSON object : View
Products Affected
apple
- mac_os_x
- darwin_streaming_server
- mac_os_x_server
- quicktime_streaming_server
CWE
CWE-178
Improper Handling of Case Sensitivity