CVE-2008-3617

Severity CVSS v4.0:

Pending analysis

Type:

CWE-255 Credentials Management

Publication date:

16/09/2008

Last modified:

09/04/2025

Description

Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:P/I:N/A:N CVSS v2.0 Severity and Metrics:

Base Score: 5.00 MEDIUM
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): None
Availability (A): None

Base Score 2.0

5.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:apple:mac_os_x:10.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.4:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:o:apple:mac_os_x:10.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.5.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.5.4:::::::*

CVE-2008-3617

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools