CVE-2002-2326: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.

Affected products

• Apple Mac OS X: version 10.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.0.4 only; version 10.1 only; …

Published 2002-12-31. Last modified 2026-06-16.