Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Mac OS X Server LDAP验证明文口令漏洞
Vulnerability Description
Mac OS X是一款使用在Mac机器上的操作系统，基于BSD系统。 Mac OS X使用Kerberos会在网络上泄露明文密码，远程攻击者可以利用这个漏洞获得密码信息未授权访问系统。 Mac OS X当使用Kerberos登录和集成LDAPv3服务器时，帐户密码以明文格式发送。当验证书权属性没有被设置，登录窗口会尝试通过配置好的LDAP服务器进行帐户验证。在验证使用加密密码的用户后，登录窗口返回后会尝试一个到服务器的简单绑定，这个简单绑定以明文方式传输帐号口令。
CVSS Information
N/A
Vulnerability Type
N/A