Mail.app in Mail for Apple Mac OS X 10.3.9 when using Kerberos 5 for SMTP authentication can include uninitialized memory in a message which might allow remote attackers to obtain sensitive information.