CVE Feed

    Dashboard / CVE / CVE-2013-5143

    CVE-2013-5143

    The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate.

    Published:Oct 24, 2013
    Last Modified:Apr 11, 2025
    EPS:Oct 24, 2013
    EPSS Score:0.00188
    CVSS Score:6.8

    Affected Products

    Vendor
    Apple
    Product
    Os X Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-4754 (CVSS 7.5) — ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers …
    CVE-2016-4694 (CVSS 9.1) — The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 a…
    CVE-2015-1151 (CVSS 5) — Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activit…
    CVE-2015-1150 (CVSS 5) — The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, whic…
    CVE-2014-4447 (CVSS 1.9) — Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading …
    CVE-2014-4446 (CVSS 2.1) — Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, whic…
    CVE-2014-3583 (CVSS 5) — The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 …
    CVE-2014-4424 (CVSS 7.5) — SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x befo…
    CVE-2014-4406 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.…
    CVE-2013-1034 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High