PT-2003-1575 · Apple · Macos X

Patrick M Mcneal · Publicado 2003-06-06 · Atualizado 2008-09-05 · CVE-2003-0378

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mac OS X (affected versions not specified)

Description: The issue concerns the Kerberos login authentication feature in Mac OS X. When this feature is used with an LDAPv3 server and LDAP bind authentication, it may send cleartext passwords to the LDAP server. This occurs under specific conditions, namely when the AuthenticationAuthority attribute is not set.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-0378

Produtos afetados

Macos X

Referências · 3

• 🔥 http://kb.cert.org/vuls/id/467828 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0378 · Nota de Segurança
• http://docs.info.apple.com/article.html?artnum=107579 · Nota