← Database

CVE-2009-0013

LOW CVSS: 2.1 Published: 2009-02-13 Modified: 2026-06-16

Description

dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-255

References