Lucene search

[email protected]CVE-2004-0823

HistoryApr 14, 2005 - 4:00 a.m.

CVE-2004-0823

2005-04-1404:00:00

[email protected]

web.nvd.nist.gov

openldap

apple mac os

cve-2004-0823

authentication

crypt password

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.5%

JSON

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.

Affected configurations

NVD

Node

openldapopenldapMatch1.0

openldapopenldapMatch1.0.1

openldapopenldapMatch1.0.2

openldapopenldapMatch1.0.3

openldapopenldapMatch1.1

openldapopenldapMatch1.1.1

openldapopenldapMatch1.1.2

openldapopenldapMatch1.1.3

openldapopenldapMatch1.1.4

openldapopenldapMatch1.2

openldapopenldapMatch1.2.1

openldapopenldapMatch1.2.2

openldapopenldapMatch1.2.3

openldapopenldapMatch1.2.4

openldapopenldapMatch1.2.5

openldapopenldapMatch1.2.6

openldapopenldapMatch1.2.7

openldapopenldapMatch1.2.8

openldapopenldapMatch1.2.9

openldapopenldapMatch1.2.10

openldapopenldapMatch1.2.11

openldapopenldapMatch1.2.12

openldapopenldapMatch1.2.13

openldapopenldapMatch2.0

openldapopenldapMatch2.0.1

openldapopenldapMatch2.0.2

openldapopenldapMatch2.0.3

openldapopenldapMatch2.0.4

openldapopenldapMatch2.0.5

openldapopenldapMatch2.0.6

openldapopenldapMatch2.0.7

openldapopenldapMatch2.0.8

openldapopenldapMatch2.0.9

openldapopenldapMatch2.0.10

openldapopenldapMatch2.0.11

openldapopenldapMatch2.0.11_9

openldapopenldapMatch2.0.11_11

openldapopenldapMatch2.0.11_11s

openldapopenldapMatch2.0.12

openldapopenldapMatch2.0.13

openldapopenldapMatch2.0.14

openldapopenldapMatch2.0.15

openldapopenldapMatch2.0.16

openldapopenldapMatch2.0.17

openldapopenldapMatch2.0.18

openldapopenldapMatch2.0.19

openldapopenldapMatch2.0.20

openldapopenldapMatch2.0.21

openldapopenldapMatch2.0.22

openldapopenldapMatch2.0.23

openldapopenldapMatch2.0.25

openldapopenldapMatch2.0.27

openldapopenldapMatch2.1.4

openldapopenldapMatch2.1.10

openldapopenldapMatch2.1.11

openldapopenldapMatch2.1.12

openldapopenldapMatch2.1.13

openldapopenldapMatch2.1.14

openldapopenldapMatch2.1.15

openldapopenldapMatch2.1.16

openldapopenldapMatch2.1.17

openldapopenldapMatch2.1.18

openldapopenldapMatch2.1.19

openldapopenldapMatch2.1_.20

Node

applemac_os_xMatch10.2.8

applemac_os_xMatch10.3.4

applemac_os_xMatch10.3.5

applemac_os_x_serverMatch10.2.8

applemac_os_x_serverMatch10.3.4

applemac_os_x_serverMatch10.3.5

CPENameOperatorVersion
openldap:openldapopenldapeq1.0
openldap:openldapopenldapeq1.0.1
openldap:openldapopenldapeq1.0.2
openldap:openldapopenldapeq1.0.3
openldap:openldapopenldapeq1.1
openldap:openldapopenldapeq1.1.1
openldap:openldapopenldapeq1.1.2
openldap:openldapopenldapeq1.1.3
openldap:openldapopenldapeq1.1.4
openldap:openldapopenldapeq1.2

CPE	Name	Operator	Version
openldap:openldap	openldap	eq	1.0
openldap:openldap	openldap	eq	1.0.1
openldap:openldap	openldap	eq	1.0.2
openldap:openldap	openldap	eq	1.0.3
openldap:openldap	openldap	eq	1.1
openldap:openldap	openldap	eq	1.1.1
openldap:openldap	openldap	eq	1.1.2
openldap:openldap	openldap	eq	1.1.3
openldap:openldap	openldap	eq	1.1.4
openldap:openldap	openldap	eq	1.2

Rows per page:

1-10 of 641

References

secunia.com/advisories/12491/

secunia.com/advisories/17233

secunia.com/advisories/21520

support.avaya.com/elmodocs2/security/ASA-2006-157.htm

www.auscert.org.au/render.html?it=4363

www.redhat.com/support/errata/RHSA-2005-751.html

www.securityfocus.com/advisories/7148

www.securityfocus.com/bid/11137

exchange.xforce.ibmcloud.com/vulnerabilities/17300

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.5%

JSON

Related for CVE-2004-0823

nvd1 cvelist1 centos3 redhat1 nessus3