CVE-2010-0521: Medium severity Apple Mac OS X Server vulnerability
Published Mar 30, 2010
·Updated
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.
Affected Software
16 affected components
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.5.5
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.5.7
Apple Mac OS X Server=10.6.1
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Apple Mac OS X Server=10.5
Apple Mac OS X Server<=10.6.2
Remediation
Event History
Mar 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0521?
CVE-2010-0521 is classified as a medium severity vulnerability.
2
How do I fix CVE-2010-0521?
To mitigate CVE-2010-0521, upgrade your Apple Mac OS X Server to version 10.6.3 or later.
3
What systems are affected by CVE-2010-0521?
CVE-2010-0521 affects Apple Mac OS X Server versions prior to 10.6.3.
4
What type of attack can exploit CVE-2010-0521?
CVE-2010-0521 can be exploited by remote attackers to obtain sensitive information from Open Directory.
5
Is CVE-2010-0521 related to LDAP requests?
Yes, CVE-2010-0521 allows unauthorized access through unspecified LDAP requests.