Description
User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended.
References
- VU#847468 third-party-advisory
- 29276 vdb-entry
- 20271 vdb-entry
- macos-workgroup-weak-security(29302) vdb-entry
- 22187 third-party-advisory
- ADV-2006-3852 vdb-entry
- APPLE-SA-2006-09-29 vendor-advisory
- 1016958 vdb-entry
- TA06-275A third-party-advisory