Chris Pepper

**Name of the Vulnerable Software and Affected Versions** Apple Mac OS X versions 10.4 through 10.4.7 **Description** The issue is related to an inconsistency in the Workgroup Manager user interface, which may lead to less secure password management. Administrators may be allowed to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, even though this operation is not supported. **Recommendations** For Apple Mac OS X versions 10.4 through 10.4.7, avoid using the Workgroup Manager to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, as this operation is not actually supported and may result in less secure password management.

**Name of the Vulnerable Software and Affected Versions** Mac OS X versions 10.4 through 10.4.2 **Description** The issue concerns the Server Admin tool in servermgr ipfilter, which may not properly write firewall rules when using multiple subnets and Address Groups under certain conditions. This could lead to firewall policies being less restrictive than intended by the administrator. **Recommendations** For Mac OS X versions 10.4 through 10.4.2, consider manually reviewing and adjusting firewall rules to ensure they align with the intended policies until a fix is available. As a temporary workaround, restrict access to sensitive resources and networks to minimize the risk of exploitation.