The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3 when debug logging is enabled and a printer requires a password allows attackers to obtain sensitive information (credentials) by reading the log data related to \authentication environment variables.\