CVE-2005-2520: Low severity apple mac os x vulnerability
Published Aug 19, 2005
·Updated
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
Affected Software
3 affected components
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.2
Remediation
Event History
Aug 19, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2520?
CVE-2005-2520 is considered a moderate severity vulnerability due to potential password exposure.
2
How do I fix CVE-2005-2520?
To fix CVE-2005-2520, upgrade to a later version of Mac OS X that addresses this vulnerability.
3
What versions of Mac OS X are affected by CVE-2005-2520?
CVE-2005-2520 affects Mac OS X versions 10.4, 10.4.1, and 10.4.2.
4
What is the impact of CVE-2005-2520?
The impact of CVE-2005-2520 allows attackers to view recently used passwords through the password assistant.
5
Can CVE-2005-2520 be exploited remotely?
CVE-2005-2520 requires local access to exploit, as it involves the local password assistant interface.