CVE-2003-0378 in Mac OS X

Summary

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 06/05/2003
• Disclosure: 06/16/2003
• Moderation: VulDB entry created
• Entries: VDB-95 (1)
• CPE: ready
• CWE: CWE-311 (Confirmed)
• Exploit: Download
• CVSS: 8.2
• EPSS: 0.00497
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0378
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0378
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0378/