CVE-2007-5847 - Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information

Back Back to CVE browser

MEDIUM

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information

Published Dec 19, 2007

6.6

MEDIUM

CVSS 2.0

EPSS 0.26%

Description

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (9)

http://docs.info.apple.com/article.html?artnum=307179
x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/28136
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1019106
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/26910
vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA07-352A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2007/4238
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5817
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39095
vdb-entryx_refsource_XF

Link	Providers	Tags
http://docs.info.apple.com/article.html?artnum=307179		x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html		vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/28136		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1019106		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/26910		vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA07-352A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2007/4238		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-5817		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39095		vdb-entryx_refsource_XF