CVE-2008-1033: Apple Cups

Low severity, CVSS 2.1. EPSS: 1.5% chance of exploitation in the next 30 days.

The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to "authentication environment variables."

Affected products

• Apple Cups: any version

Published 2008-06-02. Last modified 2026-06-16.