CVE-2008-0993

2008-03-1823:44:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

Percentile

5.3%

JSON

Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings.

Affected configurations

Nvd

Node

applemac_os_xMatch10.5.2

applemac_os_x_serverMatch10.5.2

AND

applepodcast_producer

VendorProductVersionCPE
applemac_os_x10.5.2cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
applemac_os_x_server10.5.2cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
applepodcast_producer*cpe:2.3:a:apple:podcast_producer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.5.2	cpe:2.3:o:apple:mac_os_x:10.5.2:::::::*
apple	mac_os_x_server	10.5.2	cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::*
apple	podcast_producer	*	cpe:2.3:a:apple:podcast_producer::::::::