CVE-2004-0430

AppleFileServer <10.3.3 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremoteosx
https://www.exploit-db.com/exploits/16863
exploitdb WORKING POC VERIFIED
by Dino Dai Zovi · perlremoteosx
https://www.exploit-db.com/exploits/391
exploitdb WORKING POC VERIFIED
by H D Moore · rubyremoteosx
https://www.exploit-db.com/exploits/9931
metasploit WORKING POC NORMAL
rubypocosx
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/afp/loginext.rb

Scores

EPSS 0.8241
EPSS Percentile 99.2%

Details

Status published
Products (2)
apple/mac_os_x < 10.3.3
apple/mac_os_x_server < 10.3.3
Published Jul 07, 2004
Tracked Since Feb 18, 2026