CVE-2013-5185

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-310

Affected software

No affected versions have been published.

Timeline

Published: Oct 24, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-51862.1Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows p CVE-2013-51871.9The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and inst CVE-2013-51884.0The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a CVE-2013-51895.8Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows conte CVE-2013-51904.3Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers t CVE-2013-51912.1The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the Guest CVE-2013-51924.9The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a cra CVE-2013-51934.7The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows CVE-2013-51956.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se CVE-2013-51966.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se CVE-2013-51976.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se CVE-2013-51986.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se