Mac OS X Lion LDAP Vulnerability Emerges

Posted by Soulskill on Monday August 29, 2011 @07:52AM from the mash-keyboard-for-access dept.

hypnosec tips a bit of Apple news from late last week that got overshadowed by the headlines about Steve Jobs. According to El Reg, "People logging in to Macs running OS X 10.7, aka Lion, can access restricted resources using any password they want when the machines use a popular technology known as LDAP for authentication. Short for Lightweight Directory Access Protocol, LDAP servers frequently contain repositories of highly sensitive enterprise data, making them a goldmine to attackers trying to burrow their way into sensitive networks." Initial reports about this bug cropped up less than a week after Lion was released.

1 of 97 comments (clear)

Min score:

Reason:

Sort:

Re:but... by dimeglio · 2011-08-29 08:16 · Score: 4, Insightful

Well the Mac in this case is the threat and not the vulnerability. So from that perspective, the Mac itself remains secure.

--
Views expressed do not necessarily reflect those of the author.