« Volver al listado

CVE-2013-5143

Estado: ModificadaMedia (6.8)—

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — OS X Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5143",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-24T10:53:09.740",
  "references": [
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate."
    },
    {
      "lang": "es",
      "value": "El servicio RADIUS de Server App en Apple OS X Server anteriores a 3.0 selecciona un X.509 de reserva en circunstancias no especificadas, lo que prodría permitir a atacantes man-in-the-middle secuestrar las sesiones RADIUS aprovechando el conocimiento de la clave privada de este certificado de reserva."
    }
  ],
  "lastModified": "2026-06-16T23:58:24.960",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22D7BFCC-77A8-4BCD-B824-D67E62546F7E",
              "versionEndIncluding": "2.2.2"
            },
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09166614-1225-4B0A-AC24-050E8E968A81"
            },
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F879169-CFCE-4343-8F51-EF55DE4557B1"
            },
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5046CE5-A089-4D6F-A363-9A07BCD87630"
            },
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B43AF62-55A4-441C-96FB-2FC91B8B6C87"
            },
            {
              "criteria": "cpe:2.3:o:apple:os_x_server:2.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "55E441E1-15A8-4551-B333-B2F96C0F6398"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}