CVE-2002-2326

macOS 10.0-10.0.4 and 10.1-10.1.5 - Cleartext Password Transmission via Mail.app iDisk Authentication

Title source: llm
STIX 2.1

Description

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.

References (4)

Core 4
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9670.php
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5303

Scores

EPSS 0.0127
EPSS Percentile 67.0%

Details

CWE
CWE-310
Status published
Products (11)
apple/mac_os_x 10.0
apple/mac_os_x 10.0.1
apple/mac_os_x 10.0.2
apple/mac_os_x 10.0.3
apple/mac_os_x 10.0.4
apple/mac_os_x 10.1
apple/mac_os_x 10.1.1
apple/mac_os_x 10.1.2
apple/mac_os_x 10.1.3
apple/mac_os_x 10.1.4
... and 1 more
Published Dec 31, 2002
Tracked Since Feb 18, 2026