CVE-2005-2739: Low severity Apple Mac OS X Server vulnerability

Published Nov 1, 2005

Updated

Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.

Affected Software

62 affected components

Apple Mac OS X Server=10.3.2

Apple Mac OS X Server=10.1.5

Apple Mac OS X Server=10.1

Apple iOS and macOS=10.2.5

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.2.7

Apple iOS and macOS=10.0.2

Apple Mac OS X Server=10.1.1

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple iOS and macOS=10.2.1

Apple Mac OS X Server=10.1.2

Apple Mac OS X Server=10.3.7

Apple Mac OS X Server=10.3.5

Apple iOS and macOS=10.3.1

Apple iOS and macOS=10.3.5

Apple iOS and macOS=10.4.1

Apple Mac OS X Server=10.4.2

Apple iOS and macOS=10.1

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.2.7

Apple iOS and macOS=10.0.1

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.0.3

Apple Mac OS X Server=10.4.1

Apple iOS and macOS=10.1.4

Apple iOS and macOS=10.2.4

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.2.2

Apple iOS and macOS=10.0

Apple iOS and macOS=10.3.7

Apple Mac OS X Server=10.2.5

Apple iOS and macOS=10.1.3

Apple Mac OS X Server=10.4

Apple iOS and macOS=10.3.6

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.3.8

Apple iOS and macOS=10.1.5

Apple Mac OS X Server=10.2.6

Apple iOS and macOS=10.4

Apple Mac OS X Server=10.3.9

Apple Mac OS X Server=10.2

Apple iOS and macOS=10.3.8

Apple Mac OS X Server=10.2.1

Apple iOS and macOS=10.1.1

Apple Mac OS X Server=10.3.1

Apple Mac OS X Server=10.1.4

Apple iOS and macOS=10.3.9

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.2.6

Apple iOS and macOS=10.2.3

Apple Mac OS X Server=10.0

Apple Mac OS X Server=10.2.8

Apple iOS and macOS=10.2

Apple iOS and macOS=10.4.2

Apple iOS and macOS=10.3

Apple Mac OS X Server=10.3.6

Apple iOS and macOS=10.0.4

Apple Mac OS X Server=10.1.3

Apple iOS and macOS=10.1.2

Remediation

Patch Available

http://www.securityfocus.com/bid/15252

Event History

Nov 1, 2005

CVE Published

12:47 PM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2739?

CVE-2005-2739 is considered moderate in severity due to the potential exposure of sensitive passwords with physical access.

How do I fix CVE-2005-2739?

To address CVE-2005-2739, users should update their Mac OS X to a version later than 10.4.2 where this issue is resolved.

Who is affected by CVE-2005-2739?

CVE-2005-2739 affects users of Mac OS X 10.4.2 and earlier versions of Mac OS X and Mac OS X Server.

What is the risk associated with CVE-2005-2739?

The risk associated with CVE-2005-2739 is that an attacker with physical access can view and potentially steal stored passwords.

Does CVE-2005-2739 involve network security?

No, CVE-2005-2739 does not involve network security as it requires local physical access to exploit.