CVE-2008-2331
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get...
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
Exploit likelihood
What each source reports
NVD Score used
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
- Record
CVE-2008-2331- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
- Record
CVE-2008-2331- Updated
- 2026-11-02
EUVDEUVD-2008-2327 No score
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
- Record
EUVD-2008-2327- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qmwg-ww4r-p7pw No score
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get...
Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
- Record
GHSA-qmwg-ww4r-p7pw- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2331 is a medium vulnerability (CVSS 5.0) in Apple Mac Os X, published September 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
References
securityfocus.com/bid/31189
lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
us-cert.gov/cas/techalerts/TA08-260A.html
vupen.com/english/advisories/2008/2584
securitytracker.com/id?1020875
secunia.com/advisories/31882
exchange.xforce.ibmcloud.com/vulnerabilities/45165
nvd.nist.gov/vuln/detail/CVE-2008-2331
github.com/advisories/GHSA-qmwg-ww4r-p7pw