Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
BID:11344
Info
Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
| Bugtraq ID: | 11344 |
| Class: | Design Error |
| CVE: |
CVE-2004-0927 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | This vulnerability was reported by Michael Bartosh <[email protected]>. |
| Vulnerable: |
Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
It is reported that Mac OS X comes with a default private SSL certificate vulnerability.
This vulnerability allows attackers to decrypt all communications between ServerAdmin servers and clients. This facilitates the theft of authentication credentials by sniffing networks containing the affected application, and then utilizing the known private key in applications such as 'ssldump'.
Once authentication credentials are stolen, attackers can then utilize ServerAdmin for full system compromise.
Mac OS X Server 10.2.8 and 10.3.5 are reported affected by this vulnerability. Previous versions may also be affected.
This BID has been split from BID 11322 (Apple Mac OS X Multiple Security Vulnerabilities).
It is reported that Mac OS X comes with a default private SSL certificate vulnerability.
This vulnerability allows attackers to decrypt all communications between ServerAdmin servers and clients. This facilitates the theft of authentication credentials by sniffing networks containing the affected application, and then utilizing the known private key in applications such as 'ssldump'.
Once authentication credentials are stolen, attackers can then utilize ServerAdmin for full system compromise.
Mac OS X Server 10.2.8 and 10.3.5 are reported affected by this vulnerability. Previous versions may also be affected.
This BID has been split from BID 11322 (Apple Mac OS X Multiple Security Vulnerabilities).
Exploit / POC
Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
Solution:
Apple has released advisory APPLE-SA-2004-09-30, along with fixes to address this and other vulnerabilities. Please see the referenced advisory for further information.
Apple Mac OS X Server 10.2.8
Apple Mac OS X Server 10.3.5
Solution:
Apple has released advisory APPLE-SA-2004-09-30, along with fixes to address this and other vulnerabilities. Please see the referenced advisory for further information.
Apple Mac OS X Server 10.2.8
-
Apple Security Update 2004-09-30 (Mac OS X 10.2.8 Client and Server)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04829&plat form=osx&method=sa/SecUpd2004-09-30Jag.dmg
Apple Mac OS X Server 10.3.5
-
Apple Security Update 2004-09-30 (Mac OS X 10.3.5 Client & Server)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04830&plat form=osx&method=sa/SecUpd2004-09-30Pan.dmg
References
Apple Mac OS X ServerAdmin Default SSL Certificate Vulnerability
References:
References:
- Apple Security Updates (Apple)