PT-2005-3408 · Apple · Macos X

Sam Mccandlish · Published 2005-08-19 · Updated 2008-09-05 · CVE-2005-2509

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4.2 and earlier

Description The issue concerns a problem in the loginwindow component of Mac OS X. When Fast User Switching is enabled, it allows attackers to log into other accounts if they know the passwords to at least two accounts.

Recommendations For Mac OS X versions 10.4.2 and earlier, update to a version later than 10.4.2 to resolve the issue.

Fix

Related Identifiers

CVE-2005-2509

Affected Products

Macos X

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2509 · Security Note
• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1014704 · Note
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Patch, Vendor Advisory