Vulnerability Note VU#557064
Apple Mac OS X DirectoryService may allow arbitrary users to change the root password
A vulnerabilty in the Apple Mac OS X DirectoryService may allow unprivileged users to change the root password.
The Apple Mac OS X DirectoryService contains a vulnerability that may allow unprivileged LDAP users to change the local root password. According to Apple security document 305214 :
An implementation flaw in DirectoryService allows an unprivileged LDAP user to change the local root password. The authentication mechanism in DirectoryService has been fixed to address this issue.
An unprivileged attacker may be able to change the local root password.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Apple Computer, Inc.||Affected||-||14 Mar 2007|
CVSS Metrics (Learn More)
This vulnerability was reported in Apple Security Update 2007-003.
This document was written by Chris Taschner.
- CVE IDs: CVE-2007-0723
- Date Public: 13 Mar 2007
- Date First Published: 14 Mar 2007
- Date Last Updated: 14 Mar 2007
- Severity Metric: 4.50
- Document Revision: 16
If you have feedback, comments, or additional information about this vulnerability, please send us email.