CVE-2003-1009

CVE-2003-1009 concerns Apple macOS Directory Services. Affected products include Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2. The underlying issue is that Directory Services may accept authentication server information from unknown LDAP or NetInfo s...

RPC nibindd Service Detection

This script determines whether or not the nibindd rpc service is running, in which case it connects to it to extract the list of NetInfo domains the remote host is serving. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11899; scriptversion"$Revision: 1.13 $";...

NetInfo Arbitrary Remote File Access

Using NetInfo, it is possible to obtain the password file of the remote host by querying it directly. An attacker may use it to set up a brute-force attack to crack the passwords contained in the file, and then use the gained passwords to login into the remote host, either remotely or locally. C...

NetInfo Daemon Detection

A 'NetInfo' daemon is running on this port. NetInfo is in charge of maintaining databases or 'maps' regarding the system. Such databases include the list of users, the password file, and more. If the remote host is not a NetInfo server, this service should not be reachable directly from the...

CVE-2002-1269

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...

CVE-2002-1269

CVE-2002-1269 affects the NetInfo Manager component in Mac OS X 10.2.2. The vulnerability is described as an unknown issue that allows local users to access restricted parts of the filesystem, implying partial confidentiality and partial integrity/availability impacts as per the NVD metrics (atta...

CVE-2002-1269

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...

Security Issue with Mac OS X

Below is the copy of the email I sent to Apple a week ago I have dropped them a copy of the mail on their feedback web page, too. Since I haven't heard of them since, I have chosen to make the security issue available to the community. Below the copy of the mail is a short discussion of the...

Mac OS X setuid root security hole

I can't recall if I have seen this on BugTraq so forgive me if this is an old issue. Try these steps on an OS X machine not logged in as root - Open up the terminal application - Quit the terminal application - Open up NetInfo Manager leave it in the foreground - Open up the Terminal application...

RE: Possible Issue with Netinfo and Mac OS X

I have kept quiet about this to this point because I have not contacted Apple, or given the vendor any opportunity to respond, but if this discussion is going to be held in public, I think the following points are worthy of discussion: /usr/bin/nireport can be run by any user and can pull...

Possible Issue with Netinfo and Mac OS X

Hi, I have been using Mac OS X for quite a while now, and I have just found something that concerns me a little. As you probably know Mac OS X is based on BSD and by default does not have any services running though it is not hard to turn these on thefore is reasonably secure out of the box. Now ...

CVE-1999-0956

The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...

CVE-1999-0956

Affected software: NeXT NetInfo. Vulnerable component: the _writers property, whose misbehavior enables privilege escalation and DoS. Root cause / details: described as a problem with the writers property leading to local access exploitation. Impact: local users could gain root privileges or caus...

CVE-1999-0956

The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...

PT-1997-1170 · Next · Next Netinfo

Name of the Vulnerable Software and Affected Versions: NeXT NetInfo affected versions not specified Description: The issue allows local users to gain root privileges or conduct a denial of service due to a problem with the writers property. Recommendations: At the moment, there is no information...