dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-02-12 16:30
Updated : 2017-08-07 18:33
NVD link : CVE-2009-0013
Mitre link : CVE-2009-0013
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
apple
- mac_os_x
- mac_os_x_server