CVE-2005-2520

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - Patch, Vendor Advisory () http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - Patch, Vendor Advisory
References () http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - Patch, Vendor Advisory () http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - Patch, Vendor Advisory
References () http://securitytracker.com/id?1014707 - () http://securitytracker.com/id?1014707 -

Information

Published : 2005-08-19 04:00

Updated : 2024-11-20 23:59


NVD link : CVE-2005-2520

Mitre link : CVE-2005-2520

CVE.ORG link : CVE-2005-2520


JSON object : View

Products Affected

apple

  • mac_os_x