Apple Mac OS X CVE-2012-3718 Password Information Disclosure Vulnerability

Bugtraq ID:	56252
Class:	Unknown
CVE:	CVE-2012-3718
Remote:	No
Local:	Yes
Published:	Sep 19 2012 12:00AM
Updated:	Sep 19 2012 12:00AM
Credit:	An anonymous researcher
Vulnerable:	Apple Mac OS X 10.8.1 Apple Mac OS X 10.8
Not Vulnerable:	Apple Mac OS X 10.8.2 Apple Mac OS X 10.7.5

Apple Mac OS X CVE-2012-3718 Password Information Disclosure Vulnerability

Apple Mac OS X is prone to an information-disclosure vulnerability.

Local attackers can exploit this issue to obtain other user's login passwords. This may aid in further attacks.

NOTE: This issue was previously discussed in BID 55623 (Apple Mac OS X Security Update 2012-004 Multiple Security Vulnerabilities) but has been given its own record to better document it.

This issue is fixed in the following versions:

Mac OS X 10.7.5
Mac OS X 10.8.2

Apple Mac OS X CVE-2012-3718 Password Information Disclosure Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• About the security content of OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and (Apple)