CVE-2008-1005

{"id": "CVE-2008-1005", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-03-19T00:44:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=307563", "source": "cve@mitre.org"}, {"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29393", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28290", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28326", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019656", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-079A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0920/references", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41329", "source": "cve@mitre.org"}, {"url": "http://docs.info.apple.com/article.html?artnum=307563", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/29393", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/28290", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/28326", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1019656", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-079A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/0920/references", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41329", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password."}, {"lang": "es", "value": "Webcore, usado en Apple Safaru anterior a 3.1, no oculta adecuadamente el campo de contrase\u00f1a cuando una conversi\u00f3n inversa es usada con el m\u00e9todo Kotoeri, puede permitir que atacantes que se encuentren cerca del ordenador lean la contrase\u00f1a."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09F4ADD0-449B-4DDD-9878-DE86CBD56756"}, {"criteria": "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"}, {"criteria": "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A419AE8-F5A2-4E25-9004-AAAB325E201A"}, {"criteria": "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "857C92E2-6870-409A-9457-75F8C5C7B959"}, {"criteria": "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "443FF271-A3AB-4659-80B2-89F771BF5371"}, {"criteria": "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"}, {"criteria": "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9315ADD-5B97-4639-9B59-806EFD7BC247"}, {"criteria": "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"}, {"criteria": "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D3889ED-9329-4C84-A173-2553BEAE3EDA"}, {"criteria": "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06494FA8-F12A-435A-97A4-F38C58DF43F2"}, {"criteria": "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFDCF83E-620C-40FA-9901-5D939E315143"}, {"criteria": "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A33F900-D405-40A8-A0A5-3C80320FF6E9"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E78F43-07BD-4D62-9512-DA738A92BC7B"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3180366-2240-467E-8AB9-BEA0430948F1"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AB9CC52-E533-4306-9E92-73C84B264D4E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}