Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple OS X Kerberos 5 PAM模块安全漏洞
Vulnerability Description
Apple OS X是美国苹果（Apple）公司为Mac计算机所开发的一套专用操作系统。Kerberos 5（又名krb5）PAM是其中的一个网络认证协议组件。 Apple OS X 10.12之前的版本中Kerberos 5 PAM模块存在安全漏洞，该漏洞源于程序没有使用constant-time操作确认用户名是否有效。远程攻击者可利用该漏洞枚举用户账号。
CVSS Information
N/A
Vulnerability Type
N/A