CVE-2008-2329: Infoleak
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2329?
CVE-2008-2329 has been classified as a medium risk vulnerability due to its potential to leak user names through enumeration.
How do I fix CVE-2008-2329?
To fix CVE-2008-2329, users should upgrade their Apple Mac OS X systems to at least version 10.5.5 or later.
What versions of Mac OS X are affected by CVE-2008-2329?
CVE-2008-2329 affects Apple Mac OS X versions 10.5 through 10.5.4, including both the client and server editions.
How does CVE-2008-2329 exploit the system?
CVE-2008-2329 exploits the system by allowing attackers to use wildcard characters in the Login Window to enumerate user names.
Who is vulnerable to CVE-2008-2329?
Organizations using Apple Mac OS X 10.5.x in environments with Active Directory are particularly vulnerable to CVE-2008-2329.