Strix
26.1K

CVE-2003-0876

UnknownEPSS 0.34%

Last modified

CVE-2003-0876 is a vulnerability of currently unknown severity. Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.

Metrics

EPSS Probability
0.34%

26.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
AppleMac Os X10.0
AppleMac Os X10.0.1
AppleMac Os X10.0.2
AppleMac Os X10.0.3
AppleMac Os X10.0.4
AppleMac Os X10.1
AppleMac Os X10.1.1
AppleMac Os X10.1.2
AppleMac Os X10.1.3
AppleMac Os X10.1.4
AppleMac Os X10.1.5
AppleMac Os X10.2
AppleMac Os X10.2.1
AppleMac Os X10.2.2
AppleMac Os X10.2.3
AppleMac Os X10.2.4
AppleMac Os X10.2.5
AppleMac Os X10.2.6
AppleMac Os X10.2.7
AppleMac Os X10.2.8
AppleMac Os X Server10.0
AppleMac Os X Server10.2
AppleMac Os X Server10.2.1
AppleMac Os X Server10.2.2
AppleMac Os X Server10.2.3
AppleMac Os X Server10.2.4
AppleMac Os X Server10.2.5
AppleMac Os X Server10.2.6
AppleMac Os X Server10.2.7
AppleMac Os X Server10.2.8

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2003-0876?
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
How severe is CVE-2003-0876?
Severity scoring for CVE-2003-0876 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2003-0876?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2003-0876?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST