CVE-2001-1565: Low severity apple ios and macos vulnerability

Published Dec 31, 2001

Updated

Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.

Affected Software

7 affected components

Apple iOS and macOS=10.1

Apple iOS and macOS=10.1.4

Apple iOS and macOS=10.0

Apple iOS and macOS=10.1.3

Apple iOS and macOS=10.1.5

Apple iOS and macOS=10.1.1

Apple iOS and macOS=10.1.2

Event History

Dec 31, 2001

CVE Published

05:00 AM

Jul 14, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1565?

The severity of CVE-2001-1565 is considered moderate due to the exposure of sensitive authentication information.

How do I fix CVE-2001-1565?

To mitigate CVE-2001-1565, upgrade to a version of MacOS that is not vulnerable, focusing on versions beyond 10.1.5.

Who is affected by CVE-2001-1565?

CVE-2001-1565 affects users running MacOS X versions 10.0 and 10.1 through 10.1.5.

What risk does CVE-2001-1565 pose to users?

CVE-2001-1565 allows local users to view sensitive username and password information, presenting a risk of unauthorized access.

Is CVE-2001-1565 a remote or local vulnerability?

CVE-2001-1565 is a local vulnerability, meaning it can be exploited by users with physical or local access to the affected system.