NVD

Id
4314  
Name
CVE-2008-4491  
Description
Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-08  
Modified Date
2009-02-10  
Seq
2008-4491  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27323 4314 CVE-2008-4491 http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/  View
27324 4314 CVE-2008-4491 http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt  View
27325 4314 CVE-2008-4491 4363  View
27326 4314 CVE-2008-4491 20081006 [ENABLESECURITY] Apple"s Mail.app stores your S/MIME encrypted emails in clear text  View
27327 4314 CVE-2008-4491 31598  View
27328 4314 CVE-2008-4491 1021019  View
27329 4314 CVE-2008-4491 apple-mail-smime-information-disclosure(45688)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48210 JVNDB-2008-003520 Apple Mail.app における重要なメールを読まれる脆弱性 Apple Mail.app は、"下書きメッセージをサーバに保存する" 機能が有効になっている際、S/MIME 電子メールの下書きの複製を電子メールサーバに平文で保存するため、重要なメールを読まれる脆弱性が存在します。 CVE-2008-4491 34604 CVE-2008-4491 4314 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003520.html 2008-10-08 2012-06-26 View