Description
The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to "authentication environment variables."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42713 ↗
- http://www.securityfocus.com/bid/29484 ↗
- http://www.us-cert.gov/cas/techalerts/TA08-150A.html ↗
- http://securitytracker.com/id?1020145 ↗
- http://secunia.com/advisories/30430 ↗
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html ↗
- http://www.vupen.com/english/advisories/2008/1697 ↗
- http://www.securityfocus.com/bid/29412 ↗