Apple Mac OS X CoreStorage Information Leakage Vulnerability

Release date: 2011-10-12
Updated on: 2012-05-10

Affected Systems:
Apple Mac OS X 10.7.x
Apple MacOS X Server 10.7.x
Unaffected system:
Apple Mac OS X 10.7.4
Apple Mac OS X 10.7.2
Apple MacOS X Server 10.7.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 50109
Cve id: CVE-2011-3212

OS X Lion Server contains a set of application software that can turn any Mac into a powerful Server. Mac OS is an operating system running on Apple's Macintosh series computers.

An Information Leakage vulnerability exists in the implementation of Apple Mac OS X 10.7 and 10.7.1. Attackers can exploit this vulnerability to retrieve arbitrary files on affected computers.

<* Source: Judson Powers
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.apple.com/