A vulnerabilty in the Apple Mac OS X DirectoryService may allow unprivileged users to change the root password.
The Apple Mac OS X DirectoryService contains a vulnerability that may allow unprivileged LDAP users to change the local root password. According to Apple security document 305214 :
An implementation flaw in DirectoryService allows an unprivileged LDAP user to change the local root password. The authentication mechanism in DirectoryService has been fixed to address this issue.
An unprivileged attacker may be able to change the local root password.
This vulnerability was reported in Apple Security Update 2007-003
|Date First Published:||2007-03-14|
|Date Last Updated:||2007-03-14 18:05 UTC|