Description
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/31189 ↗
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html ↗
- http://www.us-cert.gov/cas/techalerts/TA08-260A.html ↗
- http://www.vupen.com/english/advisories/2008/2584 ↗
- http://secunia.com/advisories/31882 ↗
- http://securitytracker.com/id?1020874 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45164 ↗