Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
BID:8266
Info
Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
| Bugtraq ID: | 8266 |
| Class: | Unknown |
| CVE: |
CVE-2003-0601 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2003 12:00AM |
| Updated: | Jul 11 2009 10:56PM |
| Credit: | This vulnerability has been disclosed by the vendor. |
| Vulnerable: |
Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
Apple Mac OS X Server Workgroup Manager has been reported prone to an undisclosed insecure account creation vulnerability.
It has been reported the OS X Server Workgroup Manager may create accounts in an insecure manner. This vulnerability may allow an attacker to gain unauthorized access or elevated privileges to an affected system via the newly created account.
Apple Mac OS X Server Workgroup Manager has been reported prone to an undisclosed insecure account creation vulnerability.
It has been reported the OS X Server Workgroup Manager may create accounts in an insecure manner. This vulnerability may allow an attacker to gain unauthorized access or elevated privileges to an affected system via the newly created account.
Exploit / POC
Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
Solution:
The vendor has released a security update to address this issue. It should be noted that the vendor has reported; because it is possible to install the affected software onto a Mac OS X client system, this security update will also work for these Mac OS X client systems that have the affected software installed. However there is no need to install the Security Update on
Mac OS X client systems that do not have Workgroup Manager installed. The update can be obtained using the software update pane in system preferences or by following the link below.
Apple Mac OS X Server 10.2.6
Solution:
The vendor has released a security update to address this issue. It should be noted that the vendor has reported; because it is possible to install the affected software onto a Mac OS X client system, this security update will also work for these Mac OS X client systems that have the affected software installed. However there is no need to install the Security Update on
Mac OS X client systems that do not have Workgroup Manager installed. The update can be obtained using the software update pane in system preferences or by following the link below.
Apple Mac OS X Server 10.2.6
-
Apple SecurityUpd2003-07-23.dmg
May be applied to Mac OS X 10.2.6 Client and Server
http://docs.info.apple.com/article.html?artnum=120235
References
Apple Mac OS X Server Workgroup Manager Undisclosed Insecure Account Creation Vulnerability
References:
References: