Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) via an unspecified command line.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://support.apple.com/kb/HT5784 | vendor advisory |
http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html | vendor advisory |