CVE-2004-1088 Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
| apple darwin streaming server | = 5.0.1 | No fix listed |
| apple quicktime streaming server | = 4.1.1 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.1 | No fix listed |
| apple mac os x | = 10.2.2 | No fix listed |
| apple mac os x | = 10.2.3 | No fix listed |
| apple mac os x | = 10.2.4 | No fix listed |
| apple mac os x | = 10.2.5 | No fix listed |
| apple mac os x | = 10.2.6 | No fix listed |
| apple mac os x | = 10.2.7 | No fix listed |
| apple mac os x | = 10.2.8 | No fix listed |
| apple mac os x | = 10.3 | No fix listed |
| apple mac os x | = 10.3.1 | No fix listed |
| apple mac os x | = 10.3.2 | No fix listed |
| apple mac os x | = 10.3.3 | No fix listed |
| apple mac os x | = 10.3.4 | No fix listed |
| apple mac os x | = 10.3.5 | No fix listed |
| apple mac os x | = 10.3.6 | No fix listed |
| apple mac os x server | = 10.2 | No fix listed |
| apple mac os x server | = 10.2.1 | No fix listed |
| apple mac os x server | = 10.2.2 | No fix listed |
| apple mac os x server | = 10.2.3 | No fix listed |
| apple mac os x server | = 10.2.4 | No fix listed |
| apple mac os x server | = 10.2.5 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x server | = 10.2.6 | No fix listed |
| apple mac os x server | = 10.2.7 | No fix listed |
| apple mac os x server | = 10.2.8 | No fix listed |
| apple mac os x server | = 10.3 | No fix listed |
| apple mac os x server | = 10.3.1 | No fix listed |
| apple mac os x server | = 10.3.2 | No fix listed |
| apple mac os x server | = 10.3.3 | No fix listed |
| apple mac os x server | = 10.3.4 | No fix listed |
| apple mac os x server | = 10.3.5 | No fix listed |
| apple mac os x server | = 10.3.6 | No fix listed |
References
- APPLE-SA-2004-12-02 patch vendor-advisory
- 13362 patch third-party-advisory vendor-advisory
- P-049 government-resource patch third-party-advisory vendor-advisory
- 11802 vdb-entry
- postfix-crammd5-auth-replay(18353) vdb-entry