Netinfo Manager

[Matteo <dark () isnc ch>]

Hi,

I'm using Mac OS 10.2.8 Server and today I was quite surprised to see 
that a normal user on my server can obtain the encrypted passwords of 
all the user just using the command "nidump password .":

bash-2.05a$ nidump passwd .
nobody:*:-2:-2::0:0:Unprivileged User:/dev/null:/dev/null
root:*EncryptedPass:0:0::0:0:System Administrator:/var/root:/bin/tcsh
...

Isn't this a security flaw? Is Apple going to fix it in the next 
release of Mac OS X (Panther)? Now, how to prevent users to see the 
passwords of the other users?

Thanks


---------------------------------------------------------------------------
----------------------------------------------------------------------------