CVE-2008-3609 | SynScan

Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2008-3609

The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.

Published: Sep 17, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-3609
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
apple / mac_os_x_server	10.5.2	10.5.2.x
apple / mac_os_x	10.5.1	10.5.1.x
apple / mac_os_x_server	10.5.1	10.5.1.x
apple / mac_os_x	10.5.3	10.5.3.x
apple / mac_os_x_server	10.5.3	10.5.3.x
apple / mac_os_x	10.5	10.5.x
apple / mac_os_x_server	10.5.4	10.5.4.x
apple / mac_os_x	10.5.2	10.5.2.x
apple / mac_os_x_server	10.5	10.5.x
apple / mac_os_x	10.5.4	10.5.4.x