PT-2006-5191 · Apple · Webobjects+1

Phillip Tejada · Publicado 2006-10-02 · Atualizado 2017-07-20 · CVE-2006-4387

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description The issue arises when an administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user. This action does not remove the user's account from the appserveradm or appserverusr groups, allowing the user to still manage WebObjects applications.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, manually remove the user's account from the appserveradm and appserverusr groups after clearing the "Allow user to administer this computer" checkbox to prevent unauthorized management of WebObjects applications.

Correção

Identificadores relacionados

CVE-2006-4387

Produtos afetados

Macos X

Webobjects

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/29296 · Nota
• http://osvdb.org/29273 · Nota
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4387 · Nota de Segurança
• http://securitytracker.com/id?1016955 · Nota
• http://securityfocus.com/bid/20271 · Correção
• http://secunia.com/advisories/22187 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3852 · Nota