medium4.6Public exploit code
CVE-2005-2508
dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion2005-08-15 · local · osx · Verified
Impact
dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Version 10.4.2 |
| Apple | Mac Os X Server | Version 10.4.2 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html