A security update (2003-07-23) is now available to users of Mac OS X Server:
- Security Update 2003-07-23 improves the security of your system by assigning a "disabled" password to a new account created by Workgroup Manager until that account has been saved for the first time. This ensures the new account cannot be accessed by an unauthorized individual.
There have been varying reports of a Mac OS X Client version of this update.
Apple has posted a Knowledge Base article about the update, indicating it is for both Mac OS X 10.2.6 Client & Server. The update may simply not be accessible to those without Workgroup Manager installed.