First published: Tue Mar 30 2010(Updated: )
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X Server | =10.5.2 | |
Apple Mac OS X Server | =10.5.8 | |
Apple Mac OS X Server | =10.5.5 | |
Apple Mac OS X Server | =10.5.1 | |
Apple Mac OS X Server | =10.5.6 | |
Apple Mac OS X Server | =10.5.0 | |
Apple Mac OS X Server | =10.5.3 | |
Apple Mac OS X Server | =10.5.4 | |
Apple Mac OS X Server | =10.5.7 | |
Apple Mac OS X Server | =10.6.1 | |
macOS Yosemite | =10.6.1 | |
Apple Mac OS X Server | =10.6.0 | |
macOS Yosemite | =10.6.0 | |
macOS Yosemite | =10.6.2 | |
Apple Mac OS X Server | =10.5 | |
Apple Mac OS X Server | <=10.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0521 is classified as a medium severity vulnerability.
To mitigate CVE-2010-0521, upgrade your Apple Mac OS X Server to version 10.6.3 or later.
CVE-2010-0521 affects Apple Mac OS X Server versions prior to 10.6.3.
CVE-2010-0521 can be exploited by remote attackers to obtain sensitive information from Open Directory.
Yes, CVE-2010-0521 allows unauthorized access through unspecified LDAP requests.