Vulnerability Description
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.2 |
References
- http://docs.info.apple.com/article.html?artnum=107579
- http://www.kb.cert.org/vuls/id/467828ExploitPatchThird Party Advisory
- http://docs.info.apple.com/article.html?artnum=107579
- http://www.kb.cert.org/vuls/id/467828ExploitPatchThird Party Advisory
FAQ
What is CVE-2003-0378?
CVE-2003-0378 is a vulnerability with a CVSS score of 7.5 (HIGH). The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority at...
How severe is CVE-2003-0378?
CVE-2003-0378 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0378?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X.