Description
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."
References
- 31189 vdb-entry
- APPLE-SA-2008-09-15 vendor-advisory
- TA08-260A third-party-advisory
- ADV-2008-2584 vdb-entry
- 31882 third-party-advisory
- 1020874 vdb-entry
- macos-slapconfig-information-disclosure(45164) vdb-entry