deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5544
Published: 2013-10-22
Description: The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many username-from-cert IKE requests, aka Bug ID CSCua91108.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5544; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5544
CVE: CVE-2013-5550
Published: 2013-10-22
Description: The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger hardware-component write operations, aka Bug ID CSCtq86549.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5550; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5550
CVE: CVE-2013-1739
Published: 2013-10-22
Description: Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
CVSS Score: 5.0 (MEDIUM)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761; http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html
CVE: CVE-2013-5388
Published: 2013-10-22
Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21653149; https://exchange.xforce.ibmcloud.com/vulnerabilities/87123; http://www-01.ibm.com/support/docview.wss?uid=swg21653149
CVE: CVE-2013-5389
Published: 2013-10-22
Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21653149; https://exchange.xforce.ibmcloud.com/vulnerabilities/87125; http://www-01.ibm.com/support/docview.wss?uid=swg21653149
CVE: CVE-2013-5703
Published: 2013-10-22
Description: The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: http://www.kb.cert.org/vuls/id/101462; http://www.kb.cert.org/vuls/id/101462
CVE: CVE-2013-2651
Published: 2013-10-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0033.html; http://packetstormsecurity.com/files/123558; https://exchange.xforce.ibmcloud.com/vulnerabilities/87809
CVE: CVE-2013-4422
Published: 2013-10-23
Description: SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://bugs.quassel-irc.org/issues/1244; http://quassel-irc.org/node/120; http://seclists.org/oss-sec/2013/q4/74
CVE: CVE-2013-6243
Published: 2013-10-23
Description: SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/98334; http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages; http://secunia.com/advisories/55192
CVE: CVE-2013-3244
Published: 2013-10-24
Description: Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://scn.sap.com/docs/DOC-8218; http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/58-remote-code-injection-in-sap-erp-project-system.html; https://service.sap.com/sap/support/notes/1776695
CVE: CVE-2013-6244
Published: 2013-10-24
Description: The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
References: http://en.securitylab.ru/lab/PT-2013-13; http://osvdb.org/98892; http://scn.sap.com/docs/DOC-8218
CVE: CVE-2013-6245
Published: 2013-10-24
Description: Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/98899; http://scn.sap.com/docs/DOC-8218; http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf
CVE: CVE-2013-2236
Published: 2013-10-24
Description: Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
CVSS Score: 2.6 (LOW)
CWE: CWE-119
References: http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=3f872fe60463a931c5c766dbf8c36870c0023e88; http://lists.quagga.net/pipermail/quagga-dev/2013-July/010622.html; http://nongnu.mirrors.hostinginnederland.nl//quagga/quagga-0.99.22.3.changelog.txt
CVE: CVE-2013-4293
Published: 2013-10-24
Description: The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2013-1448.html; https://bugzilla.redhat.com/show_bug.cgi?id=1002853; http://rhn.redhat.com/errata/RHSA-2013-1448.html
CVE: CVE-2013-4295
Published: 2013-10-24
Description: The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0104.html; http://shindig.apache.org/security.html; http://www.securityfocus.com/bid/63260
CVE: CVE-2013-4373
Published: 2013-10-24
Description: The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.
CVSS Score: 3.2 (LOW)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2013-1448.html; https://bugzilla.redhat.com/show_bug.cgi?id=1011824; https://exchange.xforce.ibmcloud.com/vulnerabilities/88179
CVE: CVE-2013-4390
Published: 2013-10-24
Description: Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS."
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4qdFxEW9NXBJoMsrBama8LFNyir%2B61A0Vfzp4njEpeU%3Dw%40mail.gmail.com%3E; http://secunia.com/advisories/55249; http://www.securityfocus.com/bid/63241
CVE: CVE-2013-5135
Published: 2013-10-24
Description: Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00007.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html
CVE: CVE-2013-5136
Published: 2013-10-24
Description: Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote attackers to obtain sensitive information in opportunistic circumstances by sniffing the network during an unintended cleartext VNC session.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html
CVE: CVE-2013-5144
Published: 2013-10-24
Description: Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by tapping the emergency-call button during a certain notification and camera-pane state to trigger a NULL pointer dereference.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE: CVE-2013-5162
Published: 2013-10-24
Description: Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE: CVE-2013-5164
Published: 2013-10-24
Description: Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane.
CVSS Score: 3.3 (LOW)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.html
CVE: CVE-2013-5165
Published: 2013-10-24
Description: socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5166
Published: 2013-10-24
Description: The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users to cause a denial of service (system crash) via a crafted application.
CVSS Score: 4.9 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5167
Published: 2013-10-24
Description: CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a reset operation, which makes it easier for remote web servers to track users via Set-Cookie HTTP headers.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5168
Published: 2013-10-24
Description: Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5169
Published: 2013-10-24
Description: CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proximate attackers to obtain sensitive information by reading the screen.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5170
Published: 2013-10-24
Description: Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html
CVE: CVE-2013-5171
Published: 2013-10-24
Description: CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5172
Published: 2013-10-24
Description: The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls, which allows context-dependent attackers to cause a denial of service (panic) by triggering a digest operation, as demonstrated by an IPSec connection.
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5173
Published: 2013-10-24
Description: The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a denial of service (temporary generator outage) via an application that requires many random numbers.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5174
Published: 2013-10-24
Description: Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a crafted tty read operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5175
Published: 2013-10-24
Description: The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5176
Published: 2013-10-24
Description: The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations, which allows local users to cause a denial of service (system hang) by triggering a truncation error.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5177
Published: 2013-10-24
Description: The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec structure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5178
Published: 2013-10-24
Description: LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://support.apple.com/kb/HT6150; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5179
Published: 2013-10-24
Description: App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app that uses the LaunchServices interface to specify process arguments.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://support.apple.com/kb/HT6150; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5180
Published: 2013-10-24
Description: The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5181
Published: 2013-10-24
Description: The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5182
Published: 2013-10-24
Description: Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message by using the multipart/signed content type within an unsigned message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5183
Published: 2013-10-24
Description: Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5184
Published: 2013-10-24
Description: The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi packets, which allows remote attackers to cause a denial of service (system crash) by leveraging presence in an 802.11 network's coverage area.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5185
Published: 2013-10-24
Description: The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5186
Published: 2013-10-24
Description: Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows physically proximate attackers to obtain sensitive information by reading a screen that should have transitioned into the locked state.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5187
Published: 2013-10-24
Description: The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that should have transitioned into the locked state.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5188
Published: 2013-10-24
Description: The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a transition out of hibernation, which allows physically proximate attackers to obtain access by visiting an unattended workstation in the hibernating state.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5189
Published: 2013-10-24
Description: Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows context-dependent attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended security configuration after the completion of an update.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5190
Published: 2013-10-24
Description: Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers to cause a denial of service (Smart Card usage outage) by interfering with the revocation-check procedure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html