Mac OS X AppKit Error Condition Local Account Creation

2005-08-16T23:54:39
ID OSVDB:18776
Type osvdb
Reporter OSVDB
Modified 2005-08-16T23:54:39

Description

Vulnerability Description

Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when an attacker triggers an error condition at the login screen which allows new accounts to be created. This flaw may lead to a loss of integrity.

Solution Description

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Short Description

Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when an attacker triggers an error condition at the login screen which allows new accounts to be created. This flaw may lead to a loss of integrity.

References:

Vendor Specific Advisory URL Security Tracker: 1014696 Secunia Advisory ID:16449 CVE-2005-2503 Bugtraq ID: 11802