Secunia

Chris Adams has reported a vulnerability in Mac OS X, which may allow malicious people to gain knowledge of sensitive data like user credentials.

The problem is that the Apple Filing Protocol (AFP) silently falls back to plain-text authentication when configured to use SSH when a remote host fails to accept SSH. Also SSH is launched without host key checking allowing man-in-the-middle attacks.

The vulnerability has been reported in Apple Macintosh OS X versions 10.2 through 10.3.3.

Solution
Update to version 10.3.4 or follow the guidelines in the released Knowledge Base article describing how to configure AFP to use OpenSSH exclusively without a fallback to an unencrypted session.

Provided and/or discovered by
Chris Adams

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area