PT-2006-5191 · Apple · Webobjects+1

Phillip Tejada · Published 2006-10-02 · Updated 2017-07-20 · CVE-2006-4387

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description The issue arises when an administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user. This action does not remove the user's account from the appserveradm or appserverusr groups, allowing the user to still manage WebObjects applications.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, manually remove the user's account from the appserveradm and appserverusr groups after clearing the "Allow user to administer this computer" checkbox to prevent unauthorized management of WebObjects applications.

Fix

Related Identifiers

CVE-2006-4387

Affected Products

Macos X

Webobjects

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-4387 · Security Note
• http://securityfocus.com/bid/20271 · Patch
• http://secunia.com/advisories/22187 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29296 · Note
• http://osvdb.org/29273 · Note
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1016955 · Note
• http://vupen.com/english/advisories/2006/3852 · Note