CVE-2004-0925 | BDVDB-2026-7362 Detail

Description#

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html

Exploit#

No public exploit known

History#

Version 12004-10-28Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.