Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
Software | From | Fixed in |
---|---|---|
apple / mac_os_x_server | 10.2 | 10.2.x |
apple / mac_os_x_server | 10.2.1 | 10.2.1.x |
apple / mac_os_x_server | 10.2.2 | 10.2.2.x |
apple / mac_os_x_server | 10.2.3 | 10.2.3.x |
apple / mac_os_x_server | 10.2.4 | 10.2.4.x |
apple / mac_os_x_server | 10.2.5 | 10.2.5.x |
apple / mac_os_x_server | 10.2.6 | 10.2.6.x |