The host is missing an important security update according to Apple advisory, APPLE-SA-2013-10-03-1. The update is required to fix security bypass vulnerability. The flaw is present in the Directory Services, which fails to handle a crafted application. Successful exploitation allows local users to bypass password-based authentication and modify arbitrary Directory Services records.