Vulnerability in Apple Mac Os X

CVE-2004-0925

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.3, 10.3.1, 10.3.2
Apple Mac_os_x_server — versions 10.3, 10.3.1, 10.3.2
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)