PT-2006-5203 · Apple · Workgroup Manager+2

Chris Pepper · Published 2006-10-02 · Updated 2017-07-20 · CVE-2006-4399

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.4 through 10.4.7

Description The issue is related to an inconsistency in the Workgroup Manager user interface, which may lead to less secure password management. Administrators may be allowed to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, even though this operation is not supported.

Recommendations For Apple Mac OS X versions 10.4 through 10.4.7, avoid using the Workgroup Manager to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, as this operation is not actually supported and may result in less secure password management.

Fix

Related Identifiers

CVE-2006-4399

Affected Products

Macos X

Netinfo

Workgroup Manager

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4399 · Security Note
• http://securitytracker.com/id?1016958 · Patch
• http://secunia.com/advisories/22187 · Vendor Advisory
• http://securityfocus.com/bid/20271 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29302 · Note
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Patch, Vendor Advisory
• http://osvdb.org/29276 · Note
• http://us-cert.gov/cas/techalerts/TA06-275A.html · Note
• http://kb.cert.org/vuls/id/847468 · Note
• http://vupen.com/english/advisories/2006/3852 · Note