CVE-2008-2313
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows...
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
Exploit likelihood
What each source reports
NVD Score used
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
- Record
CVE-2008-2313- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
- Record
CVE-2008-2313- Updated
- 2026-11-02
EUVDEUVD-2008-2309 No score
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
- Record
EUVD-2008-2309- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7rj2-2mf4-xhf4 No score
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows...
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
- Record
GHSA-7rj2-2mf4-xhf4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2313 is a medium vulnerability (CVSS 4.6) in Apple Mac Os X, published July 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.
References
support.apple.com/kb/HT2163
vupen.com/english/advisories/2008/1981/references
exchange.xforce.ibmcloud.com/vulnerabilities/43496
securitytracker.com/id?1020394
lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
secunia.com/advisories/30802
securityfocus.com/bid/30018
nvd.nist.gov/vuln/detail/CVE-2008-2313
github.com/advisories/GHSA-7rj2-2mf4-xhf4