CVE-2004-0925: Medium severity apple ios and macos vulnerability
Published Oct 28, 2004
·Updated
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Affected Software
12 affected components
Apple Mac OS X Server=10.3.2
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple Mac OS X Server=10.3.3
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.2
Apple Mac OS X Server=10.3
Apple Mac OS X Server=10.3.1
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.3
Remediation
Event History
Oct 28, 2004
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0925?
CVE-2004-0925 is considered a moderate severity vulnerability as it can prevent legitimate users from authenticating.
2
How do I fix CVE-2004-0925?
To fix CVE-2004-0925, upgrade Postfix on affected Mac OS X versions to a version where this issue is resolved.
3
What versions of macOS are affected by CVE-2004-0925?
CVE-2004-0925 affects Mac OS X 10.3.x versions from 10.3.1 to 10.3.5 with SMTPD AUTH enabled.
4
What type of vulnerability is CVE-2004-0925?
CVE-2004-0925 is an authentication bypass vulnerability that affects the Postfix mail server.
5
Who is impacted by CVE-2004-0925?
Users of Mac OS X who rely on SMTPD AUTH for mail services are impacted by CVE-2004-0925.