Lucene search
AppleCVE-2015-5884HistoryOct 09, 2015 - 5:59 a.m.
CVE-2015-5884
2015-10-0905:59:20
CWE-200
apple
web.nvd.nist.gov
38
cve-2015-5884
mail drop
apple os x
encryption
remote attackers
sensitive information
s/mime
e-mail
network sniffing
CVSS2
3.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0.003
Percentile
66.2%
The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment.
Affected configurations
Node
applemac_os_xRange≤10.10.5
Related
prion
prion
Information disclosure
2015-10-09 05:59:00
cvelist
cvelist
CVE-2015-5884
2015-10-09 01:00:00
nvd
nvd
CVE-2015-5884
2015-10-09 05:59:20
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-02 (Oct 2015)
2015-10-29 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
2015-10-25 00:00:00
nessus
nessus
Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)
2015-10-05 00:00:00
CVSS2
3.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0.003
Percentile
66.2%
Related for CVE-2015-5884