Apple Mac OS X CVE-2013-5181 Insecure Authentication Weakness

Bugtraq ID:	63350
Class:	Unknown
CVE:	CVE-2013-5181
Remote:	Yes
Local:	Yes
Published:	Oct 22 2013 12:00AM
Updated:	Oct 22 2013 12:00AM
Credit:	Apple
Vulnerable:	Apple Mac OS X 10.8.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8.3 Apple Mac OS X 10.8
Not Vulnerable:	Apple Mac OS X 10.9

Apple Mac OS X CVE-2013-5181 Insecure Authentication Weakness

Apple Mac OS X is prone to an insecure authentication weakness.

A remote attacker can exploit this issue to obtain a user's authentication credentials as they are sent to a server in plaintext format.

Note: This issue was previously covered in BID 63282 (Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security vulnerabilities), but has been given its own record to better document it.

Mac OS X versions prior to 10.9.

Apple Mac OS X CVE-2013-5181 Insecure Authentication Weakness

An attacker can exploit this issue using readily available tools.

Apple Mac OS X CVE-2013-5181 Insecure Authentication Weakness

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• APPLE-SA-2013-10-22-3 OS X Mavericks v10.9 (Apple)