CVE-2010-3783

2010-11-1622:00:15

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-3783

apple

mac os x

password server

authentication

vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:C/A:N

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.6%

JSON

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors.

Affected configurations

NVD

Node

applemac_os_x_serverMatch10.5.8

applemac_os_x_serverMatch10.6.0

applemac_os_x_serverMatch10.6.1

applemac_os_x_serverMatch10.6.2

applemac_os_x_serverMatch10.6.3

applemac_os_x_serverMatch10.6.4

CPENameOperatorVersion
apple:mac_os_x_serverapple mac os x servereq10.5.8
apple:mac_os_x_serverapple mac os x servereq10.6.0
apple:mac_os_x_serverapple mac os x servereq10.6.1
apple:mac_os_x_serverapple mac os x servereq10.6.2
apple:mac_os_x_serverapple mac os x servereq10.6.3
apple:mac_os_x_serverapple mac os x servereq10.6.4

CPE	Name	Operator	Version
apple:mac_os_x_server	apple mac os x server	eq	10.5.8
apple:mac_os_x_server	apple mac os x server	eq	10.6.0
apple:mac_os_x_server	apple mac os x server	eq	10.6.1
apple:mac_os_x_server	apple mac os x server	eq	10.6.2
apple:mac_os_x_server	apple mac os x server	eq	10.6.3
apple:mac_os_x_server	apple mac os x server	eq	10.6.4