CVE-2005-1338: Medium severity apple ios and macos vulnerability
Published May 4, 2005
·Updated
Mac OS X 10.3.9, when using an LDAP server that does not use ldapextendedoperation, may store initial LDAP passwords for new accounts in plaintext.
Affected Software
1 affected component
Apple iOS and macOS=10.3.9
Remediation
Event History
May 4, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1338?
CVE-2005-1338 is considered a medium-severity vulnerability due to the storage of plaintext passwords.
2
How do I fix CVE-2005-1338?
To mitigate CVE-2005-1338, ensure that your LDAP server uses ldap_extended_operation to encrypt password storage.
3
What systems are affected by CVE-2005-1338?
CVE-2005-1338 specifically affects Mac OS X version 10.3.9.
4
What are the consequences of CVE-2005-1338?
The consequence of CVE-2005-1338 is the potential exposure of sensitive password information stored in plaintext.
5
Is there a patch available for CVE-2005-1338?
As of now, there is no patch available for CVE-2005-1338, so users must implement workarounds to ensure security.