CVE-2003-0174 The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a passw...
CriticalCVSS 9.8
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | <= 6.5.19 | No fix listed |
References
- N-084 broken-link government-resource third-party-advisory
- 7442 broken-link patch third-party-advisory vdb-entry vendor-advisory
- irix-ldap-authentication-bypass(11860) third-party-advisory vdb-entry