Vulnerability in Apple Mac Os X Server

CVE-2003-0601

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.

EPSS: 0.015 (71.7th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x_server — versions 10.2, 10.2.1, 10.2.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)