Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet.
References
Link | Resource |
---|---|
http://support.apple.com/kb/HT4077 | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html | Vendor Advisory |
Configurations
Information
Published : 2010-03-30 11:30
Updated : 2010-06-20 21:00
NVD link : CVE-2010-0523
Mitre link : CVE-2010-0523
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
apple
- mac_os_x_server