CVE-2003-0378

macOS < 10.2 - Cleartext Password Transmission via Kerberos LDAP Bind Authentication

Title source: llm
STIX 2.1

Description

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

References (2)

Core 2
Core References
Exploit, Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/467828
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=107579

Scores

EPSS 0.0143
EPSS Percentile 70.4%

Details

Status published
Products (1)
apple/mac_os_x < 10.2
Published Jun 16, 2003
Tracked Since Feb 18, 2026