CVE-2010-0521 - Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests

Back Back to CVE browser

MEDIUM

Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests

Published Mar 30, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 1.78%

Description

Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT4077
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0552
Advisory

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html		vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT4077		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0552		Advisory