Security Advisory

CVE-2005-1387

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-05-02 04:00:00
Last updated 2024-08-07 21:51:49
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.