CVE-2013-5183

Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network.

Score

CVSS 2.0 2.6 Low

Status

Modified - product-security@apple.com

Published

2013-10-24

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Mac Os X (Apple)

References

• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html