Security & Privacy

Apple OS X 10.8.5 Supplemental Update Fixes Directory Services Flaw

Posted on October 4th, 2013 by

OS X 10.8.5 Supplemental Update 1.0
Apple's OS X 10.8.5 Supplemental Update 1.0 is now available as a software update that fixes a Directory Services flaw related to password validation. Available for OS X Mountain Lion 10.8 to 10.8.5, the update closes a vulnerability (CVE-2013-5163) in which a local attacker could bypass password validation due to a logic issue that existed in the Directory Services verification of authentication credentials.

The supplemental update contains the following security related bug fixes:

CVE-2013-5163 : A local user may modify Directory Services records with system privileges. A logic issue existed in Directory Service's verification of authentication credentials allowing a local attacker to bypass password validation. The issue was addressed through improved credential validation.

In addition to addressing the security flaw, this update comes with the following bug fixes:

  • Resolves an issue that may prevent certain applications from using the FaceTime HD camera on mid-2013 MacBook Air systems
  • Fixes an issue that may cause external drives to be ejected after the computer goes to sleep
  • Addresses an issue that may prevent HDMI audio from working after waking from sleep
  • Fixes an issue that may prevent certain USB Bluetooth adapters from working

The OS X 10.8.5 Supplemental Update is recommended for all users running OS X Mountain Lion v10.8.5. You can update through Apple’s Software Update tool by choosing Apple menu > Software Update, or you can go directly to Apple’s Software Downloads page and get the update from there.
 

Fox OS X Mountain Lion v10.8.5
The download file is named: OSXUpd10.8.5Supp.dmg
Its SHA-1 digest is: 18636c06f0db5b326752628fb7a2dfa3ce077ae1

 

For OS X Mountain Lion v10.8.4
The download file is named: OSXUpd10.8.5.dmg
Its SHA-1 digest is: b115881f8541b2b80f89ff0e37563f2245be445b

 

For OS X Mountain Lion v10.8 and v10.8.3
The download file is named: OSXUpdCombo10.8.5.dmg
Its SHA-1 digest is: 5f574ec77678a965f4684d176ec13014d9ffac75

 

Join Our Awesome Email Newsletter

Enter your email address below to start receiving the best Mac Security Updates.

{"url":"\/marketo\/json\/add-to-newsletter","data":"list_name=Blog Roadblock"}