CVEvulnerability
CVE-2003-0378
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
Affected configurations
• apple mac os x (<= 10.2)
References
- http://docs.info.apple.com/article.html?artnum=107579 docs.info.apple.com
- http://www.kb.cert.org/vuls/id/467828 Exploit, Patch, Third Party Advisory, US Government Resource
- http://docs.info.apple.com/article.html?artnum=107579 docs.info.apple.com
- http://www.kb.cert.org/vuls/id/467828 Exploit, Patch, Third Party Advisory, US Government Resource