CVE-2007-5855: Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, ca...

Security readout for executives and security teams

Apple Mail on Mac OS X 10.4.11 and 10.5.1 could choose plaintext SMTP authentication for accounts created with Account Assistant, even when stronger MD5 Challenge-Response was available. This could expose mail account activity to network sniffing. The issue is old and legacy-focused, but still matters if these systems remain in use. Exposure is likely limited to legacy Apple Mail installations on Mac OS X 10.4.11 or 10.5.1 using SMTP accounts created through Account Assistant. Risk is higher on untrusted or shared networks and where SMTP servers still permit plaintext authentication. Treat this as a legacy exposure issue rather than an emergency. Prioritize action if old Macs still handle business email or connect over shared networks. The business risk is account compromise through weak authentication, not broad remote takeover based on the provided evidence. Mitigation focus: Retire or isolate Mac OS X 10.4.11 and 10.5.1 systems where possible.; Review Apple advisory guidance for the applicable security update or configuration change.; Require encrypted SMTP submission and stronger authentication on mail servers..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.