Apple Mac OS X Keychain Access Password Disclosure Weakness
BID:7165
Info
Apple Mac OS X Keychain Access Password Disclosure Weakness
| Bugtraq ID: | 7165 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 19 2003 12:00AM |
| Updated: | Mar 19 2003 12:00AM |
| Credit: | Discovery of this issue credited to Will Dean. |
| Vulnerable: |
Apple Mac OS X 10.2.4 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Keychain Access Password Disclosure Weakness
A weakness has been reported for the Keychain Access application, distributed with Mac OS X, that may reveal the .Mac password in plain text.
A user that opens the Keychain Access application and selects the 'Show passphrase' on the iTools password keychain will expose the user's .Mac password.
It should be noted that only the .Mac password will be exposed.
A weakness has been reported for the Keychain Access application, distributed with Mac OS X, that may reveal the .Mac password in plain text.
A user that opens the Keychain Access application and selects the 'Show passphrase' on the iTools password keychain will expose the user's .Mac password.
It should be noted that only the .Mac password will be exposed.
Solution / Fix
Apple Mac OS X Keychain Access Password Disclosure Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.