NetSight
IP …
medium5.0

CVE-2002-2326

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecti…

Impact

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1

Weakness classification

CWE-310

References