critical9.8
CVE-2003-0174
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could …
Impact
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | through 6.5.19 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ciac.org/ciac/bulletins/n-084.shtml
- http://www.securityfocus.com/bid/7442
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11860
- http://www.ciac.org/ciac/bulletins/n-084.shtml
- http://www.securityfocus.com/bid/7442
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11860