Lucene search
HistoryOct 24, 2013 - 3:48 a.m.
CVE-2013-5185
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
44.3%
The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network.
Affected configurations
Node
applemac_os_xRange≤10.8.5supplemental_update
ORapplemac_os_xMatch10.8.0
ORapplemac_os_xMatch10.8.1
ORapplemac_os_xMatch10.8.2
ORapplemac_os_xMatch10.8.3
ORapplemac_os_xMatch10.8.4
ORapplemac_os_xMatch10.8.5
Related
cvelist
cvelist
CVE-2013-5185
2022-10-03 16:14:54
cve
cve
CVE-2013-5185
2022-10-03 16:14:54
prion
prion
Design/Logic Flaw
2013-10-24 03:48:00
seebug
seebug
Apple Mac OS X OpenLDAP 'ldapsearch'命令安全漏洞(CVE-2013-5185)
2013-10-31 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities - 01 (Jan 2014)
2014-01-20 00:00:00
nessus
nessus
Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)
2013-10-23 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
44.3%
Related for NVD:CVE-2013-5185