CVE-2006-1981

Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://docs.info.apple.com/article.html?artnum=303658
http://www.vupen.com/english/advisories/2006/1398
https://exchange.xforce.ibmcloud.com/vulnerabilities/26167
http://docs.info.apple.com/article.html?artnum=303658
http://www.vupen.com/english/advisories/2006/1398
https://exchange.xforce.ibmcloud.com/vulnerabilities/26167

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
	cpe:2.3:o:apple:mac_os_x_server:10.4.5:::::::*

History

21 Nov 2024, 00:10

Type	Values Removed	Values Added
References	~~() http://docs.info.apple.com/article.html?artnum=303658 -~~	() http://docs.info.apple.com/article.html?artnum=303658 -
References	~~() http://www.vupen.com/english/advisories/2006/1398 -~~	() http://www.vupen.com/english/advisories/2006/1398 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/26167 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/26167 -

Information

Published : 2006-04-21 22:02

Updated : 2024-11-21 00:10

NVD link : CVE-2006-1981

Mitre link : CVE-2006-1981

CVE.ORG link : CVE-2006-1981

JSON object : View

Products Affected

apple

mac_os_x
mac_os_x_server

CWE

NVD-CWE-Other

{"id": "CVE-2006-1981", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-04-21T22:02:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=303658", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/1398", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26167", "source": "cve@mitre.org"}, {"url": "http://docs.info.apple.com/article.html?artnum=303658", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/1398", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26167", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Java InputMethods en Mac OS X 10.4.5 puede causar que InputMethdos env\u00ede eventos de entrada para campos seguros a un campo de texto equivocado, lo que podr\u00eda revelar la contrase\u00f1a a otros que pudieran ver la pantalla.\r\n\u00ba"}], "lastModified": "2024-11-21T00:10:14.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C580935-0091-4163-B747-750FB7686973"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}