CVE-2013-5183

Published: Oct 24, 2013Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected (7)

Products: Apple: Mac Os X

Apple

1 product

Mac Os X

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.8.5
Apple Mac Os X	Version 10.8.0
Apple Mac Os X	Version 10.8.1
Apple Mac Os X	Version 10.8.2
Apple Mac Os X	Version 10.8.3
Apple Mac Os X	Version 10.8.4
Apple Mac Os X	Version 10.8.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.