CVE-2008-3609
No fix known EPSS <1%
The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
Products: apple mac_os_x, apple mac_os_x_server