PT-2006-5203 · Apple · Workgroup Manager+2

Chris Pepper · Publicado 2006-10-02 · Atualizado 2017-07-20 · CVE-2006-4399

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description The issue is related to an inconsistency in the Workgroup Manager user interface, which may lead to less secure password management. Administrators may be allowed to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, even though this operation is not supported.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, avoid using the Workgroup Manager to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, as this operation is not actually supported and may result in less secure password management.

Correção

Identificadores relacionados

CVE-2006-4399

Produtos afetados

Macos X

Netinfo

Workgroup Manager

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/29302 · Nota
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Correção, Aviso do Fabricante
• http://osvdb.org/29276 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4399 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-275A.html · Nota
• http://securitytracker.com/id?1016958 · Correção
• http://kb.cert.org/vuls/id/847468 · Nota
• http://secunia.com/advisories/22187 · Aviso do Fabricante
• http://securityfocus.com/bid/20271 · Correção
• http://vupen.com/english/advisories/2006/3852 · Nota