ID CVE-2008-0996
Summary The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials.
References
Vulnerable Configurations
  • cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
CVSS
Base: 1.7 (as of 08-08-2017 - 01:29)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:S/C:P/I:N/A:N
refmap via4
apple APPLE-SA-2008-03-18
bid
  • 28304
  • 28344
cert TA08-079A
confirm http://docs.info.apple.com/article.html?artnum=307562
sectrack 1019667
secunia 29420
vupen ADV-2008-0924
xf macos-printqueue-information-disclosure(41284)
Last major update 08-08-2017 - 01:29
Published 18-03-2008 - 23:44
Back to Top