CVE-2005-0715
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.
Date published : 2005-03-22
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html