Unscored severity · published Mar 30, 2010
CVE-2010-0510
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an…
–
CVSS
2%
EPSS
No
On KEV
Description
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Mac OS X Server · Apple
through 10.6.2; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0510
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0510
Patch
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
Patch
http://support.apple.com/kb/HT4077
More from Mac OS X Server
9.8
CVE-2010-1378
OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary…
9.8
CVE-2010-2941
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of…
9.8
CVE-2010-0211
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
9.8
CVE-2009-2422
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that…