CVE-2003-0881 | BDVDB-2026-5965 Detail

Description#

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.apple.com/mhonarc/security-announce/msg00038.html
http://docs.info.apple.com/article.html?artnum=61798

Exploit#

No public exploit known

History#

Version 12003-10-30Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.