Unscored CVE-2010-1838 EUVD-2010-1858GHSA-8c65-gxhm-w49w

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accoun…

Published Nov 15, 2010 · Updated Aug 7, 2024 · Assigned by apple

Description

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name.

References

1024723 vdb-entry
http://support.apple.com/kb/HT4435
44817 vdb-entry
APPLE-SA-2010-11-10-1 vendor-advisory