CVE-2003-0378

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://docs.info.apple.com/article.html?artnum=107579
http://www.kb.cert.org/vuls/id/467828 Exploit Patch Third Party Advisory US Government Resource
http://docs.info.apple.com/article.html?artnum=107579
http://www.kb.cert.org/vuls/id/467828 Exploit Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:44

Type Values Removed Values Added
References () http://docs.info.apple.com/article.html?artnum=107579 - () http://docs.info.apple.com/article.html?artnum=107579 -
References () http://www.kb.cert.org/vuls/id/467828 - Exploit, Patch, Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/467828 - Exploit, Patch, Third Party Advisory, US Government Resource
Information

Published : 2003-06-16 04:00

Updated : 2024-11-20 23:44

NVD link : CVE-2003-0378

Mitre link : CVE-2003-0378

CVE.ORG link : CVE-2003-0378

JSON object : View

Products Affected

apple

  • mac_os_x
CWE
NVD-CWE-Other