CVE-2011-0203medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing.
References
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 55416 | Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | critical |
| 800790 | Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities | Log Correlation Engine | Operating System Detection | high |
| 5968 | Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities | Nessus Network Monitor | Generic | critical |