Apple Mac OS X Wiki Server User Name Enumeration Weakness
BID:29511
Info
Apple Mac OS X Wiki Server User Name Enumeration Weakness
| Bugtraq ID: | 29511 |
| Class: | Design Error |
| CVE: |
CVE-2008-1579 |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2008 12:00AM |
| Updated: | May 28 2008 12:00AM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 |
| Not Vulnerable: |
Apple Mac OS X Server 10.5.3 |
Discussion
Apple Mac OS X Wiki Server User Name Enumeration Weakness
Apple Mac OS X is prone to a weakness in the Wiki Server that may allow an attacker to enumerate valid user names.
A successful exploit of this issue may aid in further attacks.
This issue affects Mac OS X Server 10.5 to 10.5.2.
NOTE: This issue was previously covered in BID 29412 (Apple Mac OS X 2008-003 Multiple Security Vulnerabilities) but has been given its own record to better document the vulnerability.
Apple Mac OS X is prone to a weakness in the Wiki Server that may allow an attacker to enumerate valid user names.
A successful exploit of this issue may aid in further attacks.
This issue affects Mac OS X Server 10.5 to 10.5.2.
NOTE: This issue was previously covered in BID 29412 (Apple Mac OS X 2008-003 Multiple Security Vulnerabilities) but has been given its own record to better document the vulnerability.
Exploit / POC
Apple Mac OS X Wiki Server User Name Enumeration Weakness
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.
Solution / Fix
Apple Mac OS X Wiki Server User Name Enumeration Weakness
Solution:
A vendor advisory is available to address this issue. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.5
Apple Mac OS X Server 10.5.1
Apple Mac OS X Server 10.5.2
Solution:
A vendor advisory is available to address this issue. Please see the referenced advisory for more information.
Apple Mac OS X Server 10.5
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
Apple Mac OS X Server 10.5.1
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
Apple Mac OS X Server 10.5.2
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
References
Apple Mac OS X Wiki Server User Name Enumeration Weakness
References:
References: