medium5.0
CVE-2004-0925
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users wi…
Impact
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 |
| Apple | Mac Os X Server | Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 |