CVEvulnerability

CVE-2004-0925

5.0 MEDIUM Published 2005-01-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

Affected configurations

• apple mac os x 10.3 • apple mac os x 10.3.1 • apple mac os x 10.3.2 • apple mac os x 10.3.3 • apple mac os x 10.3.4 • apple mac os x 10.3.5 • apple mac os x server 10.3 • apple mac os x server 10.3.1 • apple mac os x server 10.3.2 • apple mac os x server 10.3.3 • apple mac os x server 10.3.4 • apple mac os x server 10.3.5

References