Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password. Per: http://support.apple.com/kb/HT4077
'This issue only affects Mac OS X Server systems'
Publication date: Tue, 30 Mar 2010 23:30:00 +0000