VULNERABILITY INTELLIGENCE

CVE-2008-2330

CVSS score4.9 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2008-09-16
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references