CVE-2004-0165: Medium severity Apple Mac OS X Server vulnerability
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0165?
CVE-2004-0165 is considered a high severity vulnerability due to the potential for remote attackers to read sensitive data and gain unauthorized access.
How do I fix CVE-2004-0165?
To fix CVE-2004-0165, update your Mac OS X or Apple Mac OS X Server to the latest version that is no longer vulnerable to this issue.
What types of sensitive data can be compromised by CVE-2004-0165?
CVE-2004-0165 allows attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials.
Which versions of Mac OS X are affected by CVE-2004-0165?
CVE-2004-0165 affects Mac OS X versions 10.1, 10.2, and 10.3.2, including server editions.
Is CVE-2004-0165 an exploit that requires local access?
No, CVE-2004-0165 can be exploited remotely, making it particularly dangerous for affected systems.