CVE-2008-1033 Information disclosure in n/a

What is CVE-2008-1033?

CVE-2008-1033 is a low-severity vulnerability in Apple Cups, published on 2 Jun 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to "authentication environment variables."

Weakness: CWE-264

Which versions are affected by CVE-2008-1033?

It affects 1 product.

Products include Apple Cups.

How do I fix CVE-2008-1033?

Upgrade to a fixed version.

Is CVE-2008-1033 being exploited?

There is no known exploitation of CVE-2008-1033 in the wild and no public exploit code.

Other vulnerabilities in Apple Cups

• CVE-2008-5184 Cross-site request forgery in n/a Critical 10.0
• CVE-2008-3641 Memory corruption in n/a Critical 10.0
• CVE-2008-0053 Memory corruption in n/a Critical 10.0
• CVE-2012-6094 Missing authorization in cups Critical 9.8
• CVE-2010-2941 Use after free in n/a Critical 9.8

All Apple Cups vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2008-1033, GHSA-mjfh-xcvw-r3vp.