CVE-2004-0743: Medium severity Apple Mac OS X Server vulnerability

Published Aug 12, 2004

Updated

Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak.

Affected Software

28 affected components

Apple Mac OS X Server=10.3.2

Apple iOS and macOS=10.2.5

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.2.7

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple iOS and macOS=10.2.1

Apple iOS and macOS=10.3.1

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.2.7

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.2.4

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.2.2

Apple Mac OS X Server=10.2.5

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.2.6

Apple Mac OS X Server=10.2

Apple Mac OS X Server=10.2.1

Apple Mac OS X Server=10.3.1

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.2.6

Apple iOS and macOS=10.2.3

Apple Mac OS X Server=10.2.8

Apple iOS and macOS=10.2

Apple iOS and macOS=10.3

Event History

Aug 12, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0743?

CVE-2004-0743 is considered a medium severity vulnerability due to the potential for information leakage.

How do I fix CVE-2004-0743?

To fix CVE-2004-0743, update to Mac OS X version 10.3.5 or later, which addresses this issue.

What systems are affected by CVE-2004-0743?

CVE-2004-0743 affects several versions of Mac OS X, specifically those prior to version 10.3.5.

What is the impact of exploiting CVE-2004-0743?

Exploiting CVE-2004-0743 can lead to an unintended resending of sensitive form data to unauthorized URLs, causing information exposure.

When was CVE-2004-0743 published?

CVE-2004-0743 was published on September 9, 2004, highlighting the vulnerability in Safari on older Mac OS X versions.