Apple has released security update 2010-006 for Mac OS X and Mac OS X Server to address a vulnerability in the AFP package. This vulnerability may allow an attacker to bypass password validation and obtain sensitive information. The article indicates that this vulnerability does not affect systems prior to Mac OS X v10.6.
US-CERT encourages users and administrators to review Apple article HT4361 and apply any necessary updates to help mitigate the risks.