Vulnerability Details CVE-2013-5185
The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.3%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2013-5185
-
cpe:2.3:o:apple:mac_os_x:10.8.0
-
cpe:2.3:o:apple:mac_os_x:10.8.1
-
cpe:2.3:o:apple:mac_os_x:10.8.2
-
cpe:2.3:o:apple:mac_os_x:10.8.3
-
cpe:2.3:o:apple:mac_os_x:10.8.4
-
cpe:2.3:o:apple:mac_os_x:10.8.5