CVEvulnerability

CVE-2004-0823

7.5 HIGH Published 2004-09-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-09-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.

Affected configurations

• openldap openldap 1.0 • openldap openldap 1.0.1 • openldap openldap 1.0.2 • openldap openldap 1.0.3 • openldap openldap 1.1 • openldap openldap 1.1.1 • openldap openldap 1.1.2 • openldap openldap 1.1.3 • openldap openldap 1.1.4 • openldap openldap 1.2 • openldap openldap 1.2.1 • openldap openldap 1.2.2 • openldap openldap 1.2.3 • openldap openldap 1.2.4 • openldap openldap 1.2.5 • openldap openldap 1.2.6 • openldap openldap 1.2.7 • openldap openldap 1.2.8 • openldap openldap 1.2.9 • openldap openldap 1.2.10 • openldap openldap 1.2.11 • openldap openldap 1.2.12 • openldap openldap 1.2.13 • openldap openldap 2.0 • openldap openldap 2.0.1 • openldap openldap 2.0.2 • openldap openldap 2.0.3 • openldap openldap 2.0.4 • openldap openldap 2.0.5 • openldap openldap 2.0.6 • openldap openldap 2.0.7 • openldap openldap 2.0.8 • openldap openldap 2.0.9 • openldap openldap 2.0.10 • openldap openldap 2.0.11 • openldap openldap 2.0.11 9 • openldap openldap 2.0.11 11 • openldap openldap 2.0.11 11s • openldap openldap 2.0.12 • openldap openldap 2.0.13 • openldap openldap 2.0.14 • openldap openldap 2.0.15 • openldap openldap 2.0.16 • openldap openldap 2.0.17 • openldap openldap 2.0.18 • openldap openldap 2.0.19 • openldap openldap 2.0.20 • openldap openldap 2.0.21 • openldap openldap 2.0.22 • openldap openldap 2.0.23 • openldap openldap 2.0.25 • openldap openldap 2.0.27 • openldap openldap 2.1.4 • openldap openldap 2.1.10 • openldap openldap 2.1.11 • openldap openldap 2.1.12 • openldap openldap 2.1.13 • openldap openldap 2.1.14 • openldap openldap 2.1.15 • openldap openldap 2.1.16 … and 10 more

References