CVE-2004-0925

No fix known EPSS 1%

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

Published 2004-10-28 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server