CVE-2005-2739
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times...
CVE-2005-2739 is a low vulnerability (CVSS 2.1) in Apple Mac Os X, published November 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.35%EPSS, 29th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
Exploit likelihood
Affected products
What each source reports
NVD Score used 2.1
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
- Record
CVE-2005-2739- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
- Record
CVE-2005-2739- Updated
- 2026-11-02
EUVDEUVD-2005-2740No score
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
- Record
EUVD-2005-2740- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7pvh-3xmw-7mrwNo score
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times...
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
- Record
GHSA-7pvh-3xmw-7mrw- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1015126
vupen.com/english/advisories/2005/2256
osvdb.org/20430
secunia.com/advisories/17368
lists.apple.com/archives/security-announce/2005/Oct/msg00000.html
securityfocus.com/bid/15252
exchange.xforce.ibmcloud.com/vulnerabilities/44462
nvd.nist.gov/vuln/detail/CVE-2005-2739
github.com/advisories/GHSA-7pvh-3xmw-7mrw