{"api_version":"1","generated_at":"2026-07-23T13:35:24+00:00","cve":"CVE-2010-0545","urls":{"html":"https://cve.report/CVE-2010-0545","api":"https://cve.report/api/cve/CVE-2010-0545.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-0545","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-0545"},"summary":{"title":"CVE-2010-0545","description":"The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an \"Apply to enclosed items\" action, which allows local users to bypass intended access restrictions via normal filesystem operations.","state":"PUBLISHED","assigner":"apple","published_at":"2010-06-17 16:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.4","severity":"","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/40220","name":"http://secunia.com/advisories/40220","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1024103","name":"http://securitytracker.com/id?1024103","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Mac OS X Multiple Flaws Let Remote Users Execute Arbitrary Code, Deny Service, and Upload/Access Files and Local Users Gain Elevated Privileges","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/1481","name":"http://www.vupen.com/english/advisories/2010/1481","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT4188","name":"http://support.apple.com/kb/HT4188","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"About the security content of Security Update 2010-004 / Mac OS X v10.6.4","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/40871","name":"http://www.securityfocus.com/bid/40871","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"RETIRED: Apple Mac OS X Prior to 10.6.4 Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","name":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"APPLE-SA-2010-06-15-1 Security Update 2010-004 / Mac OS X v10.6.4","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0545","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0545","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"545","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:52:19.360Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"APPLE-SA-2010-06-15-1","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html"},{"name":"ADV-2010-1481","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/1481"},{"name":"40871","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/40871"},{"name":"1024103","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1024103"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT4188"},{"name":"40220","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40220"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an \"Apply to enclosed items\" action, which allows local users to bypass intended access restrictions via normal filesystem operations."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-06-17T16:00:00.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"name":"APPLE-SA-2010-06-15-1","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html"},{"name":"ADV-2010-1481","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/1481"},{"name":"40871","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/40871"},{"name":"1024103","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1024103"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT4188"},{"name":"40220","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40220"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2010-0545","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an \"Apply to enclosed items\" action, which allows local users to bypass intended access restrictions via normal filesystem operations."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"APPLE-SA-2010-06-15-1","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html"},{"name":"ADV-2010-1481","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/1481"},{"name":"40871","refsource":"BID","url":"http://www.securityfocus.com/bid/40871"},{"name":"1024103","refsource":"SECTRACK","url":"http://securitytracker.com/id?1024103"},{"name":"http://support.apple.com/kb/HT4188","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT4188"},{"name":"40220","refsource":"SECUNIA","url":"http://secunia.com/advisories/40220"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2010-0545","datePublished":"2010-06-17T16:00:00.000Z","dateReserved":"2010-02-03T00:00:00.000Z","dateUpdated":"2024-09-16T23:10:46.124Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-06-17 16:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3C69DEE9-3FA5-408E-AD27-F5E7043F852A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5B565F77-C310-4B83-B098-22F9489C226C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*","matchCriteriaId":"546EBFC8-79F0-42C2-9B9A-A76CA3F19470"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"26E34E35-CCE9-42BE-9AFF-561D8AA90E25"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A04FF6EE-D4DA-4D70-B0CE-154292828531"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9425320F-D119-49EB-9265-3159070DFE93"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F6BE138D-619B-4E44-BFB2-8DFE5F0D1E12"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"545","Ordinal":"1","Title":"CVE-2010-0545","CVE":"CVE-2010-0545","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"545","Ordinal":"1","NoteData":"The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an \"Apply to enclosed items\" action, which allows local users to bypass intended access restrictions via normal filesystem operations.","Type":"Description","Title":"CVE-2010-0545"},{"CveYear":"2010","CveId":"545","Ordinal":"2","NoteData":"2010-06-17","Type":"Other","Title":"Published"}]}}}