The issue was addressed through improved credential validation. A logic issue existed in Directory Service’s verification of authentication credentials allowing a local attacker to bypass password validation. The supplemental update contains the following security related bug fixes:ĬVE-2013-5163 : A local user may modify Directory Services records with system privileges. Security News Apple OS X 10.8.5 Supplemental Update Fixes Directory Services FlawĪpple’s OS X 10.8.5 Supplemental Update 1.0 is now available as a software update that fixes a Directory Services flaw related to password validation. Available for OS X Mountain Lion 10.8 to 10.8.5, the update closes a vulnerability (CVE-2013-5163) in which a local attacker could bypass password validation due to a logic issue that existed in the Directory Services verification of authentication credentials.