The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
http://secunia.com/advisories/13362/