EUVD-2013-6911

Malware in sbrugna...

OSX Gather Safari LastSession.plist

This module downloads the LastSession.plist file from the target machine. LastSession.plist is used by Safari to track active websites in the current session, and sometimes contains sensitive information such as usernames and passwords. This module will first download the original...

Design/Logic Flaw

Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file...

CVE-2013-7127

Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file...

CVE-2013-7127

Apple Safari 6.0.5 on Mac OS X 10.7.5/10.8.5 is affected by CVE-2013-7127, a local information-disclosure vulnerability in which cleartext credentials are stored in LastSession.plist. The root cause is the insecure storage of sensitive data in LastSession.plist, enabling a local user to read cred...