Lucene search

MitreCVE-2004-1088

HistoryApr 14, 2005 - 4:00 a.m.

CVE-2004-1088

2005-04-1404:00:00

mitre

web.nvd.nist.gov

postfix

apple

mac os x

cram-md5

authentication

mail server

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.

Affected configurations

Nvd

Node

appledarwin_streaming_serverMatch4.1.3

appledarwin_streaming_serverMatch5.0.1

applequicktime_streaming_serverMatch4.1.1

Node

applemac_os_xMatch10.2

applemac_os_xMatch10.2.1

applemac_os_xMatch10.2.2

applemac_os_xMatch10.2.3

applemac_os_xMatch10.2.4

applemac_os_xMatch10.2.5

applemac_os_xMatch10.2.6

applemac_os_xMatch10.2.7

applemac_os_xMatch10.2.8

applemac_os_xMatch10.3

applemac_os_xMatch10.3.1

applemac_os_xMatch10.3.2

applemac_os_xMatch10.3.3

applemac_os_xMatch10.3.4

applemac_os_xMatch10.3.5

applemac_os_xMatch10.3.6

applemac_os_x_serverMatch10.2

applemac_os_x_serverMatch10.2.1

applemac_os_x_serverMatch10.2.2

applemac_os_x_serverMatch10.2.3

applemac_os_x_serverMatch10.2.4

applemac_os_x_serverMatch10.2.5

applemac_os_x_serverMatch10.2.6

applemac_os_x_serverMatch10.2.7

applemac_os_x_serverMatch10.2.8

applemac_os_x_serverMatch10.3

applemac_os_x_serverMatch10.3.1

applemac_os_x_serverMatch10.3.2

applemac_os_x_serverMatch10.3.3

applemac_os_x_serverMatch10.3.4

applemac_os_x_serverMatch10.3.5

applemac_os_x_serverMatch10.3.6

VendorProductVersionCPE
appledarwin_streaming_server4.1.3cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*
appledarwin_streaming_server5.0.1cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*
applequicktime_streaming_server4.1.1cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*
applemac_os_x10.2cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*
applemac_os_x10.2.1cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*
applemac_os_x10.2.2cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*
applemac_os_x10.2.3cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*
applemac_os_x10.2.4cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*
applemac_os_x10.2.5cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*
applemac_os_x10.2.6cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	darwin_streaming_server	4.1.3	cpe:2.3:a:apple:darwin_streaming_server:4.1.3:::::::*
apple	darwin_streaming_server	5.0.1	cpe:2.3:a:apple:darwin_streaming_server:5.0.1:::::::*
apple	quicktime_streaming_server	4.1.1	cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:::::::*
apple	mac_os_x	10.2	cpe:2.3:o:apple:mac_os_x:10.2:::::::*
apple	mac_os_x	10.2.1	cpe:2.3:o:apple:mac_os_x:10.2.1:::::::*
apple	mac_os_x	10.2.2	cpe:2.3:o:apple:mac_os_x:10.2.2:::::::*
apple	mac_os_x	10.2.3	cpe:2.3:o:apple:mac_os_x:10.2.3:::::::*
apple	mac_os_x	10.2.4	cpe:2.3:o:apple:mac_os_x:10.2.4:::::::*
apple	mac_os_x	10.2.5	cpe:2.3:o:apple:mac_os_x:10.2.5:::::::*
apple	mac_os_x	10.2.6	cpe:2.3:o:apple:mac_os_x:10.2.6:::::::*

Rows per page:

1-10 of 351

References

lists.apple.com/archives/security-announce/2004/Dec/msg00000.html

secunia.com/advisories/13362/

www.ciac.org/ciac/bulletins/p-049.shtml

www.securityfocus.com/bid/11802

exchange.xforce.ibmcloud.com/vulnerabilities/18353

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for CVE-2004-1088