Subscribe via feed.

Apple HFS+ Information Disclosure

Posted by deepcore under Apple, exploit, OSX security tools (No Respond)

VSR identified a vulnerability in HFS+, a filesystem implemented in the OS X XNU kernel. HFS+ is the default filesystem in use on many installations of the Mac OS X operating system. By exploiting this vulnerability, an unprivileged user with local access to a machine using HFS+ may be able to read raw filesystem data, bypassing file permissions and resulting in information disclosure.

Tags: , ,