Unscored CVE-2005-1387 EUVD-2005-1390GHSA-3w28-qcgr-pffg

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows l…

Published May 2, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.

References

13449 vdb-entry
20050429 Mac OS X Cocktail 3.5.4 admin password disclosure mailing-list
16046 vdb-entry
15201 third-party-advisory