CVE-2004-0430
AppleFileServer <10.3.3 - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremoteosx
https://www.exploit-db.com/exploits/16863
exploitdb
WORKING POC
VERIFIED
by Dino Dai Zovi · perlremoteosx
https://www.exploit-db.com/exploits/391
exploitdb
WORKING POC
VERIFIED
by H D Moore · rubyremoteosx
https://www.exploit-db.com/exploits/9931
metasploit
WORKING POC
NORMAL
rubypocosx
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/afp/loginext.rb
References (7)
Scores
EPSS
0.8241
EPSS Percentile
99.2%
Details
Status
published
Products (2)
apple/mac_os_x
< 10.3.3
apple/mac_os_x_server
< 10.3.3
Published
Jul 07, 2004
Tracked Since
Feb 18, 2026