CVE-2004-1083

Published: Dec 3, 2004Modified: Apr 16, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.

Affected (35)

Products: Apple: Darwin Streaming Server, Quicktime Streaming Server, Mac Os X, Mac Os X Server

Apple

4 products

Darwin Streaming Server

Quicktime Streaming Server

Mac Os X

Mac Os X Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Darwin Streaming Server	Version 4.1.3
Apple Darwin Streaming Server	Version 5.0.1
Apple Quicktime Streaming Server	Version 4.1.1

Configuration B

32 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.2.1
Apple Mac Os X	Version 10.2.2
Apple Mac Os X	Version 10.2.3
Apple Mac Os X	Version 10.2.4
Apple Mac Os X	Version 10.2.5
Apple Mac Os X	Version 10.2.6
Apple Mac Os X	Version 10.2.7
Apple Mac Os X	Version 10.2.8
Apple Mac Os X	Version 10.2
Apple Mac Os X	Version 10.3.1
Apple Mac Os X	Version 10.3.2
Apple Mac Os X	Version 10.3.3
Apple Mac Os X	Version 10.3.4
Apple Mac Os X	Version 10.3.5
Apple Mac Os X	Version 10.3.6
Apple Mac Os X	Version 10.3
Apple Mac Os X Server	Version 10.2.1
Apple Mac Os X Server	Version 10.2.2
Apple Mac Os X Server	Version 10.2.3
Apple Mac Os X Server	Version 10.2.4
Apple Mac Os X Server	Version 10.2.5
Apple Mac Os X Server	Version 10.2.6
Apple Mac Os X Server	Version 10.2.7
Apple Mac Os X Server	Version 10.2.8
Apple Mac Os X Server	Version 10.2
Apple Mac Os X Server	Version 10.3.1
Apple Mac Os X Server	Version 10.3.2
Apple Mac Os X Server	Version 10.3.3
Apple Mac Os X Server	Version 10.3.4
Apple Mac Os X Server	Version 10.3.5
Apple Mac Os X Server	Version 10.3.6
Apple Mac Os X Server	Version 10.3