Bypassing Guest-Restricted Folder Access in Apple Mac OS X 10.7

CVE-2011-3225 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which allows remote attackers to bypass intended browsing restrictions by leveraging access to the nobody account.

Learn more about our Cis Benchmark Audit For Server Software.