Unrated severityNVD Advisory· Published Oct 24, 2013· Updated Apr 29, 2026
CVE-2013-5183
CVE-2013-5183
Description
Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
7cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*range: <=10.8.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.