CVE-2008-1578: Infoleak
The ssoutil program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1578?
CVE-2008-1578 is classified as a high-severity vulnerability due to the exposure of sensitive information through command-line arguments.
How do I fix CVE-2008-1578?
To mitigate CVE-2008-1578, upgrade your system to Apple Mac OS X 10.5.3 or later where the vulnerability has been addressed.
Who is affected by CVE-2008-1578?
CVE-2008-1578 affects users of Apple Mac OS X versions 10.4.11 and 10.5.1 through 10.5.2.
What impact does CVE-2008-1578 have on security?
CVE-2008-1578 allows local users to gain access to sensitive passwords, potentially compromising account security.
Is CVE-2008-1578 still a risk for current systems?
CVE-2008-1578 is not a risk for current macOS systems since the vulnerability was resolved in OS X 10.5.3.