Apple Mac OS X Lion Directory Services Security Bypass Vulnerabilities

Bugtraq ID:	49676
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 19 2011 12:00AM
Updated:	Sep 19 2011 12:00AM
Credit:	Defence in Depth
Vulnerable:
Not Vulnerable:

Apple Mac OS X Lion Directory Services Security Bypass Vulnerabilities

Apple Mac OS X Lion is prone to multiple security-bypass vulnerabilities.

Local attackers can exploit these issues to obtain sensitive information or change the password of other users on the computer, without sufficient privileges.

Apple Mac OS X Lion Directory Services Security Bypass Vulnerabilities

Local attackers can exploit these issues using readily available commands.

The following example commands are available:

$ dscl localhost -read /Search/Users/bob

$ dscl localhost -passwd /Search/Users/<username>

Apple Mac OS X Lion Directory Services Security Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X Lion Directory Services Security Bypass Vulnerabilities

References:

• Cracking OS X Lion Passwords (Defence in Depth )
  
• Mac OS X Homepage (Apple)