PT-2005-3419 · Apple · Macos X

Andrew Langmead · Published 2005-08-19 · Updated 2008-09-05 · CVE-2005-2520

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4 through 10.4.2

Description The password assistant in Mac OS X has an issue where it does not reset the suggested password list when creating multiple accounts from the same process. This allows attackers to view recently used passwords.

Recommendations For Mac OS X versions 10.4 through 10.4.2, consider disabling the password assistant feature until a fix is available to prevent potential exploitation.

Fix

Related Identifiers

CVE-2005-2520

Affected Products

Macos X

References · 4

• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2520 · Security Note
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Vendor Advisory
• http://securitytracker.com/id?1014707 · Note