← Database

CVE-2008-3610

HIGH CVSS: 7.6 Published: 2008-09-16 Modified: 2026-06-16

Description

Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account from the user list.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-287

References