CVE-2008-0063

Key facts

CVSS score

7.5 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness (CWE)

CWE-908

EPSS score

3.5% (89th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2008-0076)

Published

March 19, 2008

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / mac os x
• apple / mac os x server
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• mit / kerberos 5
• opensuse / opensuse
• opensuse / opensuse
• suse / linux
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise software development kit

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

• Apple Mac OS X v10.3.6 and Apple Mac OS X Server V10.3.6 - Apple Inc. - Common Criteria CCEVS-VR-0086-2005 - archived

References

• http://docs.info.apple.com/article.html?artnum=307562(Broken Link)
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html(Mailing List)
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html(Mailing List)
• http://secunia.com/advisories/29420(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29423(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29424(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29428(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29435(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29438(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29450(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29451(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29457(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29462(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29464(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29516(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/29663(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/30535(Broken Link, Vendor Advisory)
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html(Broken Link)
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html(Broken Link)
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt(Third Party Advisory)
• http://wiki.rpath.com/Advisories:rPSA-2008-0112(Broken Link)
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112(Broken Link)
• http://www.debian.org/security/2008/dsa-1524(Third Party Advisory)
• http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:069(Patch, Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:070(Patch, Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:071(Patch, Third Party Advisory)
• http://www.redhat.com/support/errata/RHSA-2008-0164.html(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2008-0180.html(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2008-0181.html(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2008-0182.html(Broken Link)
• http://www.securityfocus.com/archive/1/489761(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/archive/1/489883/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/archive/1/493080/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/bid/28303(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id?1019627(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/usn-587-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2008-0009.html(Third Party Advisory)
• http://www.vupen.com/english/advisories/2008/0922/references(Broken Link, Vendor Advisory)
• http://www.vupen.com/english/advisories/2008/0924/references(Broken Link, Vendor Advisory)