PT-2001-2649 · Macos · Pppd

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1565

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pppd in MacOS x versions 10.0 through 10.1.5

Description The issue allows local users to obtain authentication information, including usernames and passwords, by accessing the command line arguments of the Point to Point Protocol daemon (pppd) process via the ps command.

Recommendations For MacOS x versions 10.0 through 10.1.5, consider restricting access to the ps command or the pppd process to minimize the risk of exploitation. As a temporary workaround, avoid using the pppd daemon until a patch is available or apply configuration changes to prevent local users from accessing sensitive authentication information.

Correção

Identificadores relacionados

CVE-2001-1565

Produtos afetados

Pppd

Referências · 4

• http://iss.net/security_center/static/7750.php · Nota
• http://securityfocus.com/bid/3753 · Nota
• http://macsecurity.org/pipermail/macsec/2001-December/000299.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1565 · Nota de Segurança