CVE-2005-1387

UNKNOWN

Cocktail 3

Published May 2, 2005

Modified 1 years ago

Details

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.

References

WEB

http://marc.info/?l=bugtraq&m=111480898530362&w=2

ADVISORY

http://secunia.com/advisories/15201

WEB

http://www.osvdb.org/16046

WEB

http://www.securityfocus.com/bid/13449

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2005-1387

CVSS Analysis

CVSS v2.0

7.2

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedMay 2, 2005

ModifiedAug 7, 2024