The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | 10.5 | 10.5.x |
| apple / mac_os_x | 10.5.1 | 10.5.1.x |
| apple / mac_os_x | 10.5.2 | 10.5.2.x |
| apple / mac_os_x | 10.5.3 | 10.5.3.x |
| apple / mac_os_x | 10.5.4 | 10.5.4.x |
| apple / mac_os_x_server | 10.5 | 10.5.x |
| apple / mac_os_x_server | 10.5.1 | 10.5.1.x |
| apple / mac_os_x_server | 10.5.2 | 10.5.2.x |
| apple / mac_os_x_server | 10.5.3 | 10.5.3.x |
| apple / mac_os_x_server | 10.5.4 | 10.5.4.x |