Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2009-0138

servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration.

Published: Feb 13, 2009
Updated: Nov 9, 2025
CVE: CVE-2009-0138
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-287

OWASP TOP 10:

A2 - Broken Authentication

Affected Software
References

Software	From	Fixed in
apple / mac_os_x	10.5.6	10.5.6.x
apple / mac_os_x_server	10.5.6	10.5.6.x

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://secunia.com/advisories/33937
http://support.apple.com/kb/HT3438
http://www.securityfocus.com/bid/33759
http://www.securityfocus.com/bid/33813
http://www.vupen.com/english/advisories/2009/0422

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo