Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.7
CVE-2008-0996: macOS 10.5.2 may store printer passwords on disk
CVE-2008-0996 · published 18 years ago
Summary
On macOS 10.5.2, the printing system can write the username and password used for a secured printer to the local hard drive when a print job starts. This could let anyone with access to the computer read those credentials. Update the system or apply the available security patch to stop the passwords from being saved.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | mac_os_x |
10.5.2 cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:* |
| apple | mac_os_x_server |
10.5.2 cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:* |
Original advisory text
The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the creden...
The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials.
References
- http://docs.info.apple.com/article.html?artnum=307562
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Patch
- http://secunia.com/advisories/29420
- http://www.securityfocus.com/bid/28304
- http://www.securityfocus.com/bid/28344
- http://www.securitytracker.com/id?1019667
- http://www.us-cert.gov/cas/techalerts/TA08-079A.html US Government Resource
- http://www.vupen.com/english/advisories/2008/0924/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41284
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
1.7
Low
Type
CWE-200Information Exposure
CWE-255Credentials Management Errors
Timeline
Published18 Mar 2008
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-0996 · NVD
Track software like this
Free during beta