CVE-2006-4387: Medium severity Apple iOS and macOS vulnerability
Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4387?
CVE-2006-4387 is considered a moderate severity vulnerability due to the potential for unauthorized access to WebObjects applications.
How do I fix CVE-2006-4387?
To fix CVE-2006-4387, ensure that users are properly removed from the appserveradm and appserverusr groups when their administrative rights are revoked.
What versions of macOS are affected by CVE-2006-4387?
CVE-2006-4387 affects Apple Mac OS X versions 10.4 through 10.4.7.
What is the impact of CVE-2006-4387?
The impact of CVE-2006-4387 is that unauthorized users may still manage WebObjects applications despite having their administrative permissions revoked.
Is there a patch available for CVE-2006-4387?
While specific patches may be unavailable, users should upgrade their systems to a more secure version of macOS that addresses these vulnerabilities.