« previous next »
Pages: [1]   Go Down

Author Topic: Lion / LDAP password vulnerability!  (Read 1357 times)

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Lion / LDAP password vulnerability!
« on: August 29, 2011, 06:59:40 PM »
According to The Register in the UK there is a known hole in the security of Lion when used with Lightweight Directory Access Protocol which is quite common out there in the real world!

QUOTE
People logging in to Macs running OS X 10.7, aka Lion, can access restricted resources using any password they want when the machines use a popular technology known as LDAP for authentication. Short for Lightweight Directory Access Protocol, LDAP servers frequently contain repositories of highly sensitive enterprise data, making them a goldmine to attackers trying to burrow their way in to sensitive networks.

http://www.theregister.co.uk/2011/08/26/ma..._security_hole/
« Last Edit: August 30, 2011, 08:16:40 AM by gunug »
Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Lion / LDAP password vulnerability!
« Reply #1 on: August 29, 2011, 10:31:33 PM »
QUOTE
[LDAP] which is quite command out there in the real world!
Im assume you mean "common" not that I've ever used it...although I think Mail supports it.

From <MacFixit>:
QUOTE
This problem appears to only affect LDAP-bound systems, so if your system is not connected to a central authentication server (which has to be explicitly done by an IT administrator) then you should not be concerned with this problem. As a result, OS X systems purchased off the shelf will not be affected by this issue, so your Mac at home running OS X Lion will be safe from this vulnerability
Lots of fodder for Mac-haters, of course. rolleyes.gif
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Lion / LDAP password vulnerability!
« Reply #2 on: August 30, 2011, 08:16:06 AM »
XABD - I changed the offending word; that's what I get for talking to my wife when I'm typing into TS!
« Last Edit: August 30, 2011, 08:17:12 AM by gunug »
Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Lion / LDAP password vulnerability!
« Reply #3 on: August 30, 2011, 09:17:52 AM »
eek2.gif You should know by now that doing anything other than paying 150% attention to your wife's comments can lead to disastrous consequences!!! :mono: Mind-reading abilities are highly important, also!! yes.gif

As for the "word," I assumed it was part of the OS's propensity to insert what it thinks we should be typing... rolleyes.gif laughhard.gif
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:
Pages: [1]   Go Up
« previous next »