Overview
Apple Workgroup Manager fails to properly enable ShadowHash passwords in a NetInfo parent. Workgroup Manager may appear to use ShadowHash passwords when crypt is used.
Description
Workgroup Manager is a system adimistration tool in Apple Mac OS X Server that manages users, groups, and computers across a network. According to Apple Security Update 2006-006: Workgroup Manager appears to allow switching authentication type from crypt to ShadowHash passwords in a NetInfo parent, when in actuality it does not. |
Impact
Workgroup Manager may appear to use ShadowHash passwords when crypt is used. |
Solution
Upgrade |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This issue was reported in Apple Security Update 2006-006. Apple credits Chris Pepper of The Rockefeller University for reporting this issue.
This document was written by Chris Taschner.
Other Information
| CVE IDs: | CVE-2006-4399 |
| Date Public: | 2006-09-29 |
| Date First Published: | 2006-10-02 |
| Date Last Updated: | 2006-11-21 19:20 UTC |
| Document Revision: | 11 |