CVE-2004-0622 | BDVDB-2026-6545 Detail

Description#

Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=108819559925981&w=2
http://www.securityfocus.com/archive/1/488930/100/100/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/16557
http://www.securityfocus.com/archive/1/488948/100/100/threaded
http://citp.princeton.edu/pub/coldboot.pdf

Exploit#

No public exploit known

History#

Version 12004-06-30Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.