CVE-2010-0510: Critical severity Apple Mac OS X Server vulnerability
Published Mar 30, 2010
·Updated
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
Affected Software
13 affected components
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.5.5
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.5.7
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.0
Apple Mac OS X Server=10.5
Apple Mac OS X Server<=10.6.2
Remediation
Patch Available
Event History
Mar 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0510?
CVE-2010-0510 is classified as a medium severity vulnerability.
2
How do I fix CVE-2010-0510?
To fix CVE-2010-0510, upgrade to Apple Mac OS X Server 10.6.3 or later.
3
Which versions of Apple Mac OS X Server are affected by CVE-2010-0510?
CVE-2010-0510 affects Apple Mac OS X Server versions prior to 10.6.3.
4
What does CVE-2010-0510 exploit?
CVE-2010-0510 exploits improper password replication, allowing remote authenticated users access via an expired password.
5
Is there a workaround for CVE-2010-0510?
There is no documented workaround for CVE-2010-0510; upgrading is the recommended solution.