Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.
References
Configurations
Information
Published : 2005-05-02 21:00
Updated : 2016-10-17 20:19
NVD link : CVE-2005-1387
Mitre link : CVE-2005-1387
JSON object : View
CWE
Products Affected
kristofer_szymanski
- cocktail