CVE:CVE-2005-1387
CNNVD:CNNVD-200505-889
Cocktail 3.5.4 and possibly earlier in Mac OS X中的Cocktail 3.5.4及可能的更早版本在命令行中以明文方式将管理员密码传递给sudo，本地用户可以运行listing进程来获取敏感信息。
solution:Upgrade kristofer_szymanski cocktail to a higher version than 3.5.4,and avoid the version 3.5.4