PT-2013-5428 · Apple · Macos X

Publicado 2013-10-24 · Atualizado 2013-10-24 · CVE-2013-5183

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9

Description The issue allows remote attackers to obtain sensitive information by sniffing the network when Kerberos authentication is enabled and TLS is disabled, due to the sending of invalid cleartext data.

Recommendations For versions prior to 10.9, enable TLS to prevent the sending of cleartext data.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-5183

Produtos afetados

Macos X

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-5183 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html · Aviso do Fabricante