CVE-2004-0925
First published: Thu Oct 28 2004(Updated: )
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Server | =10.3.2 | |
| Apple macOS Server | =10.3.5 | |
| Apple iOS and macOS | =10.3.1 | |
| Apple iOS and macOS | =10.3.5 | |
| Apple macOS Server | =10.3.3 | |
| Apple macOS Server | =10.3.4 | |
| Apple iOS and macOS | =10.3.2 | |
| Apple macOS Server | =10.3 | |
| Apple macOS Server | =10.3.1 | |
| Apple iOS and macOS | =10.3.4 | |
| Apple iOS and macOS | =10.3.3 | |
| Apple iOS and macOS | =10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2004-0925?
CVE-2004-0925 is considered a moderate severity vulnerability as it can prevent legitimate users from authenticating.
How do I fix CVE-2004-0925?
To fix CVE-2004-0925, upgrade Postfix on affected Mac OS X versions to a version where this issue is resolved.
What versions of macOS are affected by CVE-2004-0925?
CVE-2004-0925 affects Mac OS X 10.3.x versions from 10.3.1 to 10.3.5 with SMTPD AUTH enabled.
What type of vulnerability is CVE-2004-0925?
CVE-2004-0925 is an authentication bypass vulnerability that affects the Postfix mail server.
Who is impacted by CVE-2004-0925?
Users of Mac OS X who rely on SMTPD AUTH for mail services are impacted by CVE-2004-0925.
- agent/type
- agent/references
- agent/severity
- agent/remedy
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple macos server
- version/apple macos server/10.3.2
- version/apple macos server/10.3.5
- canonical/apple ios and macos
- version/apple ios and macos/10.3.1
- version/apple ios and macos/10.3.5
- version/apple macos server/10.3.3
- version/apple macos server/10.3.4
- version/apple ios and macos/10.3.2
- version/apple macos server/10.3
- version/apple macos server/10.3.1
- version/apple ios and macos/10.3.4
- version/apple ios and macos/10.3.3
- version/apple ios and macos/10.3