CVEvulnerability
CVE-2003-0174
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2003-05-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-346
Description
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Affected configurations
• sgi irix (<= 6.5.19)
Related
Weakness · CWE (1)
- CWE-346 Origin Validation Error weakness
Referenced by CWE · observed example (1)
- CWE-346 Origin Validation Error weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P Broken Link, Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/n-084.shtml Broken Link
- http://www.securityfocus.com/bid/7442 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11860 Third Party Advisory, VDB Entry
- ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P Broken Link, Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/n-084.shtml Broken Link
- http://www.securityfocus.com/bid/7442 Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11860 Third Party Advisory, VDB Entry