Description
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity.
References
- ADV-2007-4238 vdb-entry
- TA07-352A third-party-advisory
- 28136 third-party-advisory
- macos-mail-weak-security(39104) vdb-entry
- 26910 vdb-entry
- APPLE-SA-2007-12-17 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307179
- 1019107 vdb-entry