CVE-2008-4491
Apple Mail.app 3.5 - Unprotected Sensitive Data Exposure via S/MIME Draft Storage
Title source: llmDescription
Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45688
Various Sources x_refsource_misc
http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/31598
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/497057/100/0/threaded
Various Sources x_refsource_misc
http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4363
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1021019
Scores
EPSS
0.0120
EPSS Percentile
64.5%
Details
CWE
CWE-200
Status
published
Products (1)
apple/mail
3.5
Published
Oct 08, 2008
Tracked Since
Feb 18, 2026