CVE-2005-2745

Mail.app in Mac OS X 10.3.9 - Information Disclosure via Uninitialized Memory in Kerberos 5 SMTP Authentication

Title source: llm
STIX 2.1

Description

Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, which might allow remote attackers to obtain sensitive information.

References (4)

Core 4
Core References
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-312.shtml
Patch, Vendor Advisory third-party-advisory x_refsource_auscert
http://www.auscert.org.au/5509
Patch, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16920/

Scores

EPSS 0.0145
EPSS Percentile 70.8%

Details

Status published
Products (2)
apple/mac_os_x 10.3.9
apple/mac_os_x_server 10.3.9
Published Oct 26, 2005
Tracked Since Feb 18, 2026