| Vulnerability Name: | CVE-2013-5163 (CCN-87666) | ||||||||
| Assigned: | 2013-10-03 | ||||||||
| Published: | 2013-10-03 | ||||||||
| Updated: | 2013-10-07 | ||||||||
| Summary: | Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors. per http://lists.apple.com/archives/security-announce/2013/Oct/msg00000.html version 10.8.5 is vulnerable. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 6.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C) 4.9 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C/E:U/RL:OF/RC:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-287 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-5163 Source: APPLE Type: Vendor Advisory APPLE-SA-2013-10-03-1 Source: CCN Type: SA55129 Apple Mac OS X Directory Services Authentication Security Bypass Security Issue Source: CCN Type: Apple Web site About the security content of the OS X Mountain Lion v10.8.5 Supplemental Update Source: CCN Type: BID-62812 Apple Mac OS X CVE-2013-5163 Local Security Bypass Vulnerability Source: XF Type: UNKNOWN apple-macosx-cve20135163-priv-esc(87666) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||