CVE-2013-5183

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 24, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-51845.7The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi packets, which allows rCVE-2013-51854.3The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, whCVE-2013-51862.1Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows pCVE-2013-51871.9The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instCVE-2013-51884.0The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a CVE-2013-51895.8Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows conteCVE-2013-51904.3Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers tCVE-2013-51912.1The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the GuestCVE-2013-51924.9The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a craCVE-2013-51934.7The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows CVE-2013-51956.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of seCVE-2013-51966.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se
CVE-2013-5183: Low severity, CVSS 2.6 | Vulnix