PT-2003-1575 · Apple · Macos X

Patrick M Mcneal · Published 2003-06-06 · Updated 2008-09-05 · CVE-2003-0378

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mac OS X (affected versions not specified)

Description: The issue concerns the Kerberos login authentication feature in Mac OS X. When this feature is used with an LDAPv3 server and LDAP bind authentication, it may send cleartext passwords to the LDAP server. This occurs under specific conditions, namely when the AuthenticationAuthority attribute is not set.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0378

Affected Products

Macos X

References · 3

• 🔥 http://kb.cert.org/vuls/id/467828 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0378 · Security Note
• http://docs.info.apple.com/article.html?artnum=107579 · Note