Unscored severity · published Oct 8, 2008
CVE-2008-4491
Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mail · Apple
3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4491
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4491
enablesecurity.com
http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/
resources.enablesecurity.com
http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt
securityreason.com
http://securityreason.com/securityalert/4363
www.securityfocus.com
http://www.securityfocus.com/archive/1/497057/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/31598
www.securitytracker.com
http://www.securitytracker.com/id?1021019
More from Mail
5.9
CVE-2017-17689
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL
5.9
CVE-2017-17688
The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL
–
CVE-2010-3887
The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to…
–
CVE-2008-0039
Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL
–
CVE-2005-2512
Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a…