Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2011-0178

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.

  • Published: Mar 23, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-0178
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
apple / mac_os_x 10.6.3 10.6.3.x
apple / mac_os_x - 10.6.6.x
apple / mac_os_x 10.6.1 10.6.1.x
apple / mac_os_x 10.6.0 10.6.0.x
apple / mac_os_x 10.6.2 10.6.2.x
apple / mac_os_x 10.6.4 10.6.4.x
apple / mac_os_x 10.6.5 10.6.5.x
apple / mac_os_x_server 10.6.3 10.6.3.x
apple / mac_os_x_server - 10.6.6.x
apple / mac_os_x_server 10.6.4 10.6.4.x
apple / carboncore - -
apple / mac_os_x_server 10.6.5 10.6.5.x
apple / mac_os_x_server 10.6.1 10.6.1.x
apple / mac_os_x_server 10.6.2 10.6.2.x
apple / mac_os_x_server 10.6.0 10.6.0.x