Vulnerability Details CVE-2005-1387
Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.0%
CVSS Severity
CVSS v2 Score 7.2
References
- http://marc.info/?l=bugtraq&m=111480898530362&w=2
- http://secunia.com/advisories/15201
- http://www.osvdb.org/16046
- http://www.securityfocus.com/bid/13449
- http://marc.info/?l=bugtraq&m=111480898530362&w=2
- http://secunia.com/advisories/15201
- http://www.osvdb.org/16046
- http://www.securityfocus.com/bid/13449
Products affected by CVE-2005-1387
-
cpe:2.3:a:kristofer_szymanski:cocktail:3.5.4