Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0925

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

Published

2005-01-27T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System apple mac_os_x 10.3 Yes
Operating System apple mac_os_x 10.3.1 Yes
Operating System apple mac_os_x 10.3.2 Yes
Operating System apple mac_os_x 10.3.3 Yes
Operating System apple mac_os_x 10.3.4 Yes
Operating System apple mac_os_x 10.3.5 Yes
Operating System apple mac_os_x_server 10.3 Yes
Operating System apple mac_os_x_server 10.3.1 Yes
Operating System apple mac_os_x_server 10.3.2 Yes
Operating System apple mac_os_x_server 10.3.3 Yes
Operating System apple mac_os_x_server 10.3.4 Yes
Operating System apple mac_os_x_server 10.3.5 Yes
References