CVE-2007-0723

This CVE affects Apple Mac OS X DirectoryService DS Plug-Ins in Mac OS X 10.3.9 and 10.4 up to 10.4.8. The issue is an authentication flaw in DirectoryService that allows remote authenticated LDAP users to modify the local root password and gain privileges. The underlying vectors are not publicly...