CVE-2006-0386

LowCVSS 1.7/10Last modified Jun 16, 2026

Description

FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.

Metrics

CVSS 2.0 1.7/10AV:L/AC:L/Au:S/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://www.osvdb.org/23642
http://www.securityfocus.com/bid/16907Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791
https://exchange.xforce.ibmcloud.com/vulnerabilities/25024
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://www.osvdb.org/23642
http://www.securityfocus.com/bid/16907Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791
https://exchange.xforce.ibmcloud.com/vulnerabilities/25024

Timeline

Published: Mar 3, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-03876.4Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary c CVE-2006-03882.6Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary CVE-2006-03892.6Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbi CVE-2006-03911.7Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers CVE-2006-03925.1Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execut CVE-2006-03934.0OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in CVE-2006-03955.1The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a CVE-2006-03965.1Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute CVE-2006-03977.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-03987.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-03997.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-04007.5CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domai