NVD

Id
10077  
Name
CVE-2011-3436  
Description
Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-10-14  
Modified Date
2012-01-13  
Seq
2011-3436  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57792 10077 CVE-2011-3436 APPLE-SA-2011-10-12-3  View
57793 10077 CVE-2011-3436 http://support.apple.com/kb/HT5002  View
57794 10077 CVE-2011-3436 50085  View
57795 10077 CVE-2011-3436 macos-open-directory-sec-bypass(70585)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32246 JVNDB-2011-002486 Apple Mac OS の Open Directory におけるパスワード変更の制限を回避される脆弱性 Apple Mac OS の Open Directory は、パスワードを変更する前に、ユーザに現在使用しているパスワードを要求しないため、パスワード変更の制限を回避される脆弱性が存在します。 CVE-2011-3436 51343 CVE-2011-3436 10077 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002486.html 2011-10-14 2011-10-25 View