Description
Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.
References
- 31189 vdb-entry
- APPLE-SA-2008-09-15 vendor-advisory
- TA08-260A third-party-advisory
- ADV-2008-2584 vdb-entry
- macos-vncviewer-weak-security(45174) vdb-entry
- 1020882 vdb-entry