BID:7894

Apple Mac OS X DSIMPORTEXPORT Information Disclosure Weakness

Info

Apple Mac OS X DSIMPORTEXPORT Information Disclosure Weakness

Bugtraq ID:	7894
Class:	Design Error
CVE:	CVE-2003-0420
Remote:	No
Local:	Yes
Published:	Jun 13 2003 12:00AM
Updated:	Jul 11 2009 10:06PM
Credit:	This vulnerability was reported by the vendor.
Vulnerable:	Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2

Not Vulnerable:

Discussion

Apple Mac OS X DSIMPORTEXPORT Information Disclosure Weakness

An issue has been reported in the Apple Mac OS X dsimportexport utility that may allow for the disclosure of potentially sensitive information to logged in users.

Exploit / POC

Apple Mac OS X DSIMPORTEXPORT Information Disclosure Weakness

There is no exploit required.

Solution / Fix

Apple Mac OS X DSIMPORTEXPORT Information Disclosure Weakness

Solution:
Apple has released a security update to address this issue. Users are advised to upgrade as soon as possible. The fix can be downloaded or can be automatically applied by using Software Update pane in the System Preferences.

A fix is available:

Apple Mac OS X 10.2