Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2003-0378

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2003-0378
Last Modified 05 Sep 2008 04:34:10
Published 16 Jun 2003 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2003-0378

Summary

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

Vulnerable Systems

Operating System

  • Apple Mac Os X 10.2


References

CERT-VN - VU#467828

CONFIRM - http://docs.info.apple.com/article.html?artnum=107579


Last Updated: 27 May 2016 10:37:53