CVE-2013-5143

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate...

CVE-2013-5143

The CVE-2013-5143 issue affects Apple OS X Server’s RADIUS service (Server App) prior to version 3.0. The root cause is the service selecting a fallback X.509 certificate under unspecified conditions, which could enable a man-in-the-middle attack to hijack RADIUS sessions by an attacker who knows...