← Database

CVE-2005-1387

HIGH CVSS: 7.2 Published: 2005-05-03 Modified: 2026-06-16

Description

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.

Affected Platforms

Kristofer Szymanski Cocktail

Weakness Type

NVD-CWE-Other

References