CVE-2005-2520

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlPatch, Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlPatch, Vendor Advisory
http://securitytracker.com/id?1014707
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlPatch, Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlPatch, Vendor Advisory
http://securitytracker.com/id?1014707

Timeline

Published: Aug 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-25214.6Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.CVE-2005-25225.1Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote CVE-2005-25234.3Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary w CVE-2005-25245.0Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari t CVE-2005-25255.0CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows rem CVE-2005-25265.0CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request a CVE-2005-25271.2Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unsp CVE-2005-252910.0Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attac CVE-2005-253010.0Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS CVE-2005-25315.0OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a clie CVE-2005-25325.0OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote a CVE-2005-25332.1OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (me