Description
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
References (1)
Core 1
Core References
Patch, Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
Scores
EPSS
0.0111
EPSS Percentile
62.6%
Details
Status
published
Products (12)
apple/mac_os_x
10.3
apple/mac_os_x
10.3.1
apple/mac_os_x
10.3.2
apple/mac_os_x
10.3.3
apple/mac_os_x
10.3.4
apple/mac_os_x
10.3.5
apple/mac_os_x_server
10.3
apple/mac_os_x_server
10.3.1
apple/mac_os_x_server
10.3.2
apple/mac_os_x_server
10.3.3
... and 2 more
Published
Jan 27, 2005
Tracked Since
Feb 18, 2026