Mac OS X Multiple Vulnerabilities (Security Update 2005-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2005-007 applied. This security update contains fixes for the following products : - Apache 2 - AppKit - Bluetooth - CoreFoundation - CUPS - Directory Services - HItoolbox - Kerberos - loginwindow -...

Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion

Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion source: https://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described...

Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion

source: https://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described in BID 14567 Apple Mac OS X Multiple Vulnerabilities. It is now being assigned i...

Apple Mac OS X chpass/chfn/chsh utilities do not properly validate external programs

Overview Apple Mac OS X Directory Service utilities use external programs insecurely, potentially allowing an attacker to execute arbitrary code. Description The OS X Directory Services have three utilities chpass, chfn, and chsh to update information in the user database, such as user name,...

Mac OS X Multiple Vulnerabilities (Security Update 2005-005)

The remote host is missing Security Update 2005-005. This security update contains fixes for the following applications : - Apache - AppKit - AppleScript - Bluetooth - Directory Services - Finder - Foundation - HelpViewer - LDAP - libXpm - lukemftpd - NetInfo - ServerAdmin - sudo - Terminal - VPN...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1460

CVE-2004-1460 affects Cisco Secure Access Control Server (ACS) 3.2(3) and earlier. When configured with an anonymous bind in Novell Directory Services (NDS), and authenticating NDS users with NDS, remote attackers can gain unauthorized access to AAA clients by using a blank password. The NVD note...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-0514

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."...

Mac OS X Multiple Vulnerabilities (Security Update 2003-12-19)

The remote host is missing Security Update 2003-12-19. This security update includes the following components : - AFP Server - cd9600.util - Directory Services - fetchmail - fsusage - rsync - System Initialization For MacOS X 10.3, it also includes : - ASN.1 Decoding for PKI This update contains...

Apple Mac OS X vulnerable to privilege escalation when using Directory Services

Overview A vulnerability in Mac OS X may permit a local authenticated user with physical access to the machine to gain elevated privileges. Description Mac OS X permits the remote authentication of users via directory sevices lookups. When a user logs in to a machine configured to use the Directo...

CVE-2004-0514

CVE-2004-0514 corresponds to a local privilege escalation in Mac OS X (LoginWindow) via Directory Services lookups. CERT/CC notes a vulnerability in Mac OS X 10.3 through 10.3.3 that could allow a local authenticated user with physical access to gain root privileges (applications in the user sess...

CVE-2004-0514

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."...

VulnCheck KEV: CVE-2003-0533

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service LSASS in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute...

CVE-2003-1009

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...

CVE-2003-1009

CVE-2003-1009 concerns Apple macOS Directory Services. Affected products include Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2. The underlying issue is that Directory Services may accept authentication server information from unknown LDAP or NetInfo s...

CVE-2003-0171

DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program...

CVE-2003-0171

DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program...

CVE-2002-0241

NDSAuth.DLL in Cisco Secure Authentication Control Server ACS 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services NDS, which could allow those users to authenticate to the server...

CVE-2002-0241

The vulnerability CVE-2002-0241 affects Cisco Secure Authentication Control Server (ACS) 3.0.1 via the NDSAuth.DLL, which fails to validate the Expired/Disabled state of NetWare/NDS users. As a result, such accounts could authenticate to the ACS despite being expired or disabled. The issue is cau...