Details of VAR-200505-0790

ID

VAR-200505-0790

CVE

CVE-2005-1505

TITLE

Mac OS Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200505-979

DESCRIPTION

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext

Trust: 0.99

sources: NVD: CVE-2005-1505 // VULHUB: VHN-12714

AFFECTED PRODUCTS

vendor:

apple

model:

mail

scope:

version:

2.0

Trust: 0.6

sources: CNNVD: CNNVD-200505-979

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-1505
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200505-979
value:	HIGH
Trust: 0.6
VULHUB:	VHN-12714
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-1505
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-12714
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-12714 // CNNVD: CNNVD-200505-979 // NVD: CVE-2005-1505

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-1505

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200505-979

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200505-979

EXTERNAL IDS

db:	NVD	id:	CVE-2005-1505	Trust: 1.7
db:	BUGTRAQ	id:	20050504 MAC OS 10.4: NEW-ACCOUNT-WIZZARD IN MAIL 2.0 SENDS CLEAR-TEXT PASSWORDS	Trust: 0.6
db:	XF	id:	20670	Trust: 0.6
db:	CNNVD	id:	CNNVD-200505-979	Trust: 0.6
db:	VULHUB	id:	VHN-12714	Trust: 0.1

sources: VULHUB: VHN-12714 // CNNVD: CNNVD-200505-979 // NVD: CVE-2005-1505

REFERENCES

url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/20670	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=111539448630095&w=2	Trust: 1.0
url:	http://xforce.iss.net/xforce/xfdb/20670	Trust: 0.6
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=111539448630095&w=2	Trust: 0.6
url:	http://marc.info/?l=bugtraq&m=111539448630095&w=2	Trust: 0.1

sources: VULHUB: VHN-12714 // CNNVD: CNNVD-200505-979 // NVD: CVE-2005-1505

SOURCES

db:	VULHUB	id:	VHN-12714
db:	CNNVD	id:	CNNVD-200505-979
db:	NVD	id:	CVE-2005-1505

LAST UPDATE DATE

2024-08-14T15:45:42.802000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-12714	date:	2017-07-11T00:00:00
db:	CNNVD	id:	CNNVD-200505-979	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2005-1505	date:	2017-07-11T01:32:40.750

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-12714	date:	2005-05-11T00:00:00
db:	CNNVD	id:	CNNVD-200505-979	date:	2005-05-11T00:00:00
db:	NVD	id:	CVE-2005-1505	date:	2005-05-11T04:00:00