Description
iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type.
References
- APPLE-SA-2010-03-29-1 vendor-advisory
- http://support.apple.com/kb/HT4077