PT-2006-5198 · Apple · Macos X

Ragnar Sundblad · Published 2006-10-02 · Updated 2017-07-20 · CVE-2006-4394

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description A logic error in the LoginWindow component allows network accounts without GUIDs to bypass service access controls, enabling unauthorized login to the system. This issue can be exploited via unknown vectors in the loginwindow.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, update to a version later than 10.4.7 to resolve the issue.

Fix

Related Identifiers

CVE-2006-4394

Affected Products

Macos X

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4394 · Security Note
• http://securitytracker.com/id?1016959 · Patch
• http://secunia.com/advisories/22187 · Vendor Advisory
• http://securityfocus.com/bid/20271 · Patch
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Patch, Vendor Advisory
• http://osvdb.org/29272 · Note
• http://kb.cert.org/vuls/id/897628 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29293 · Note
• http://us-cert.gov/cas/techalerts/TA06-275A.html · Note
• http://vupen.com/english/advisories/2006/3852 · Note