Patrick Dunstan

The issue allows local users to read the password data of arbitrary users via unspecified vectors.

The issue allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation, as the Open Directory does not require the current password to be provided before changing it.