PT-2003-1611 · Apple · Macintosh Os X Server

Published 2003-06-13 · Updated 2017-07-11 · CVE-2003-0420

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apple Macintosh OS X Server version 10.2.6

Description: The issue allows local users to obtain the username and password of the account running the dsimportexport tool, resulting in an information leak.

Recommendations: For Apple Macintosh OS X Server version 10.2.6, consider restricting access to the dsimportexport tool to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-0420

Affected Products

Macintosh Os X Server

References · 6

• http://securityfocus.com/bid/7894 · Vendor Advisory
• http://kb.cert.org/vuls/id/JPLA-5NTL8E · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-0420 · Security Note
• http://auscert.org.au/render.html?it=3165 · Vendor Advisory
• http://secunia.com/advisories/9025 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12342 · Note