VULNERABILITY INTELLIGENCE
CVE-2007-5855
CVSS score6.4 MEDIUM
EPSS probability1.91%
CISA KEVNot currently listed
Published2007-12-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity.
Weakness classification
- CWE-287: Improper Authentication