CVE-2010-4754: Apple Mac OS X

Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

Affected products

• Apple Mac OS X: up to and including 10.6.7
• Freebsd Freebsd: version 7.3 only; version 8.1 only
• Netbsd Netbsd: version 5.0.2 only
• OpenBSD OpenBSD: version 4.7 only

Published 2011-03-02. Last modified 2026-06-16.