First published: Tue Sep 16 2008(Updated: )
Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X Server | =10.5.2 | |
macOS Yosemite | =10.5.1 | |
Apple Mac OS X Server | =10.5.1 | |
macOS Yosemite | =10.5.3 | |
Apple Mac OS X Server | =10.5.3 | |
macOS Yosemite | =10.5 | |
Apple Mac OS X Server | =10.5.4 | |
macOS Yosemite | =10.5.2 | |
Apple Mac OS X Server | =10.5 | |
macOS Yosemite | =10.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-3619 is considered a moderate severity vulnerability due to improper handling of log file permissions.
To fix CVE-2008-3619, ensure that the permissions on Time Machine Backup log files are set to restrict access to authorized users only.
CVE-2008-3619 affects Mac OS X versions 10.5 through 10.5.4.
CVE-2008-3619 could allow local users to access sensitive information logged in Time Machine Backup log files.
Yes, a patch or update was released by Apple to resolve the vulnerabilities associated with CVE-2008-3619.