CVE-2003-0876
macOS X <= 10.2.8 - Unintended Directory Permission Assignment via Finder Drag-and-Drop
Title source: llmDescription
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/8917
Various Sources vendor-advisory
x_refsource_atstake
http://www.atstake.com/research/advisories/2003/a102803-1.txt
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/8916
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/13537
Scores
EPSS
0.0034
EPSS Percentile
27.0%
Details
Status
published
Products (30)
apple/mac_os_x
10.0
apple/mac_os_x
10.0.1
apple/mac_os_x
10.0.2
apple/mac_os_x
10.0.3
apple/mac_os_x
10.0.4
apple/mac_os_x
10.1
apple/mac_os_x
10.1.1
apple/mac_os_x
10.1.2
apple/mac_os_x
10.1.3
apple/mac_os_x
10.1.4
... and 20 more
Published
Nov 03, 2003
Tracked Since
Feb 18, 2026