Description
dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information.
References
- 33937 third-party-advisory
- 1021722 vdb-entry
- 33759 vdb-entry
- http://support.apple.com/kb/HT3438
- APPLE-SA-2009-02-12 vendor-advisory
- macosx-dstools-information-disclosure(48717) vdb-entry
- ADV-2009-0422 vdb-entry
- 33815 vdb-entry