Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."Referenceshttp://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
