CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors.

• CWE-22

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4077Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4077Vendor Advisory

Published

Mar 30, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0527Integer overflow in Apple QuickTime before 7.6.6 on Windows …
• CVE-2010-0528Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0529Heap-based buffer overflow in QuickTime.qts in Apple QuickTi…
• CVE-2010-0530Apple QuickTime before 7.6.9 on Windows sets weak permission…
• CVE-2010-0531Apple iTunes before 9.1 allows remote attackers to cause a d…
• CVE-2010-0532Race condition in the installation package in Apple iTunes b…
• CVE-2010-0534Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not en…
• CVE-2010-0535Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos …
• CVE-2010-0536Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0537DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does no…
• CVE-2010-0538Apple Java for Mac OS X 10.5 before Update 7 and Java for Ma…
• CVE-2010-0539Integer signedness error in the window drawing implementatio…