Apple HFS+ Information Disclosure
Posted by deepcore on March 22, 2011 – 10:29 pm
VSR identified a vulnerability in HFS+, a filesystem implemented in the OS X XNU kernel. HFS+ is the default filesystem in use on many installations of the Mac OS X operating system. By exploiting this vulnerability, an unprivileged user with local access to a machine using HFS+ may be able to read raw filesystem data, bypassing file permissions and resulting in information disclosure.
Read the original here:
Apple HFS+ Information Disclosure
Post a reply
You must be logged in to post a comment.