CVE-2008-0993

Published: Mar 18, 2008Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings.

Affected (1)

Products: Apple: Podcast Producer

Apple

1 product

Podcast Producer

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Apple Podcast Producer	All versions

Running on/with	Platform Versions
Apple Mac Os X	Version 10.5.2
Apple Mac Os X Server	Version 10.5.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://www.securityfocus.com/bid/28304

Source: cve@mitre.org

http://www.securityfocus.com/bid/28372

Source: cve@mitre.org

http://www.securitytracker.com/id?1019664

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562