Lucene search

MitreCVE-2005-2520

HistoryAug 19, 2005 - 4:00 a.m.

CVE-2005-2520

2005-08-1904:00:00

mitre

web.nvd.nist.gov

cve-2005-2520

password assistant

mac os x

vulnerability

security

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

VendorProductVersionCPE
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
apple	mac_os_x	10.4.1	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
apple	mac_os_x	10.4.2	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*

References

lists.apple.com/archives/security-announce/2005//Aug/msg00001.html

lists.apple.com/archives/security-announce/2005/Aug/msg00000.html

securitytracker.com/id?1014707

Social References

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2005-2520