Vulnerability in Apple Mac OS X Server

CVE-2010-3783

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x_server — versions 10.6.0, 10.6.3, 10.6.4
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
product-security@apple.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)