PT-2003-1611 · Apple · Macintosh Os X Server

Publicado 2003-06-13 · Atualizado 2017-07-11 · CVE-2003-0420

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apple Macintosh OS X Server version 10.2.6

Description: The issue allows local users to obtain the username and password of the account running the dsimportexport tool, resulting in an information leak.

Recommendations: For Apple Macintosh OS X Server version 10.2.6, consider restricting access to the dsimportexport tool to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-0420

Produtos afetados

Macintosh Os X Server

Referências · 6

• http://securityfocus.com/bid/7894 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/JPLA-5NTL8E · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-0420 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12342 · Nota
• http://auscert.org.au/render.html?it=3165 · Aviso do Fabricante
• http://secunia.com/advisories/9025 · Aviso do Fabricante