Description
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.
References
- 31189 vdb-entry
- APPLE-SA-2008-09-15 vendor-advisory
- TA08-260A third-party-advisory
- ADV-2008-2584 vdb-entry
- 31882 third-party-advisory
- 1020874 vdb-entry
- macos-directoryservices-info-disclosure(45163) vdb-entry