Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-4399 | First vendor Publication | 2006-10-03 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4399 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-11-17 | Name : Mac OS X Version File : nvt/macosx_version.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 29276 | Apple Mac OS X Server Workgroup Manager NetInfo Parent Account Password Encry... Mac OS X Server contains a flaw that may allow an administrator to believe he changed the authentication type from crypt to ShadowHash passwords, when the change does not actually happen. The issue is triggered when Workgroup Manager indicates that it is possible to make the change through its interface, though it is not. It is possible that the flaw may allow administrators to use a different authentication type than they actually intend resulting in a loss of integrity.. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-09-29 | Name : The remote host is missing a Mac OS X update which fixes a security issue. File : macosx_10_4_8.nasl - Type : ACT_GATHER_INFO |
| 2006-09-29 | Name : The remote host is missing a Mac OS X update which fixes a security issue. File : macosx_SecUpd2006-006.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:19:21 |
|
| 2024-11-28 12:09:50 |
|
| 2021-05-04 12:04:29 |
|
| 2021-04-22 01:05:09 |
|
| 2020-05-23 00:18:18 |
|
| 2017-07-20 09:23:51 |
|
| 2016-06-28 15:55:55 |
|
| 2016-04-26 15:00:31 |
|
| 2014-02-17 10:37:03 |
|
| 2013-05-11 11:07:39 |
|
