Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-01-26 21:00
Updated : 2008-09-10 12:28
NVD link : CVE-2004-0925
Mitre link : CVE-2004-0925
JSON object : View
CWE
Products Affected
apple
- mac_os_x
- mac_os_x_server