41 matches found
CVE-2004-0924
CVE-2004-0924 affects NetInfo Manager on Mac OS X 10.3.x up to 10.3.5. After an initial root login, it reports the root account as disabled even when it has not, implying a misleading status indication. The available sources confirm the issue but do not provide concrete remediation steps or patch...
CVE-2004-0924: Undefined Security Weakness
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...
CVE-2003-1009
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...
CVE-2003-1009
CVE-2003-1009 concerns Apple macOS Directory Services. Affected products include Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2. The underlying issue is that Directory Services may accept authentication server information from unknown LDAP or NetInfo s...
CVE-2003-1009: Undefined Security Weakness
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...
NetInfo Arbitrary Remote File Access
Using NetInfo, it is possible to obtain the password file of the remote host by querying it directly. An attacker may use it to set up a brute-force attack to crack the passwords contained in the file, and then use the gained passwords to login into the remote host, either remotely or locally. C...
RPC nibindd Service Detection
This script determines whether or not the nibindd rpc service is running, in which case it connects to it to extract the list of NetInfo domains the remote host is serving. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11899; scriptversion"$Revision: 1.13 $";...
NetInfo Daemon Detection
A 'NetInfo' daemon is running on this port. NetInfo is in charge of maintaining databases or 'maps' regarding the system. Such databases include the list of users, the password file, and more. If the remote host is not a NetInfo server, this service should not be reachable directly from the...
CVE-2002-1269
Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...
CVE-2002-1269
CVE-2002-1269 affects the NetInfo Manager component in Mac OS X 10.2.2. The vulnerability is described as an unknown issue that allows local users to access restricted parts of the filesystem, implying partial confidentiality and partial integrity/availability impacts as per the NVD metrics (atta...
CVE-2002-1269
Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...
CVE-2002-1269: Undefined Security Weakness
Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...
Security Issue with Mac OS X
Below is the copy of the email I sent to Apple a week ago I have dropped them a copy of the mail on their feedback web page, too. Since I haven't heard of them since, I have chosen to make the security issue available to the community. Below the copy of the mail is a short discussion of the...
Mac OS X setuid root security hole
I can't recall if I have seen this on BugTraq so forgive me if this is an old issue. Try these steps on an OS X machine not logged in as root - Open up the terminal application - Quit the terminal application - Open up NetInfo Manager leave it in the foreground - Open up the Terminal application...
Possible Issue with Netinfo and Mac OS X
Hi, I have been using Mac OS X for quite a while now, and I have just found something that concerns me a little. As you probably know Mac OS X is based on BSD and by default does not have any services running though it is not hard to turn these on thefore is reasonably secure out of the box. Now ...
RE: Possible Issue with Netinfo and Mac OS X
I have kept quiet about this to this point because I have not contacted Apple, or given the vendor any opportunity to respond, but if this discussion is going to be held in public, I think the following points are worthy of discussion: /usr/bin/nireport can be run by any user and can pull...
CVE-1999-0956
The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...
CVE-1999-0956
Affected software: NeXT NetInfo. Vulnerable component: the _writers property, whose misbehavior enables privilege escalation and DoS. Root cause / details: described as a problem with the writers property leading to local access exploitation. Impact: local users could gain root privileges or caus...