Description
Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions.
References
- 31681 vdb-entry
- 31718 vdb-entry
- 32222 third-party-advisory
- macosx-weblog-weak-security(45787) vdb-entry
- ADV-2008-2780 vdb-entry
- 1021030 vdb-entry
- APPLE-SA-2008-10-09 vendor-advisory
- http://support.apple.com/kb/HT3216