CVE-2013-5185

The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network...

PT-2013-5430

Name of the Vulnerable Software and Affected Versions OpenLDAP in Apple Mac OS X versions prior to 10.9 Description The issue is related to the ldapsearch command-line program in OpenLDAP, which does not properly process the minssf configuration setting. This allows remote attackers to obtain...