Description
User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.kb.cert.org/vuls/id/847468 ↗
- http://www.osvdb.org/29276 ↗
- http://www.securityfocus.com/bid/20271 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29302 ↗
- http://secunia.com/advisories/22187 ↗
- http://www.vupen.com/english/advisories/2006/3852 ↗
- http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html ↗
- http://securitytracker.com/id?1016958 ↗
- http://www.us-cert.gov/cas/techalerts/TA06-275A.html ↗