CVE

Id
9251  
CVE No.
CVE-2004-0823  
Status
Candidate  
Description
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.  
Phase
Assigned (20040827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61118 9251 CVE-2004-0823 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm  View
61119 9251 CVE-2004-0823 APPLE:APPLE-SA-2004-09-07  View
61120 9251 CVE-2004-0823 URL:http://www.securityfocus.com/advisories/7148  View
61121 9251 CVE-2004-0823 REDHAT:RHSA-2005:751  View
61122 9251 CVE-2004-0823 URL:http://www.redhat.com/support/errata/RHSA-2005-751.html  View
61123 9251 CVE-2004-0823 AUSCERT:ESB-2004.0559  View
61124 9251 CVE-2004-0823 URL:http://www.auscert.org.au/render.html?it=4363  View
61125 9251 CVE-2004-0823 BID:11137  View
61126 9251 CVE-2004-0823 URL:http://www.securityfocus.com/bid/11137  View
61127 9251 CVE-2004-0823 OVAL:oval:org.mitre.oval:def:10703  View
61128 9251 CVE-2004-0823 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10703  View
61129 9251 CVE-2004-0823 SECUNIA:12491  View
61130 9251 CVE-2004-0823 URL:http://secunia.com/advisories/12491/  View
61131 9251 CVE-2004-0823 SECUNIA:17233  View
61132 9251 CVE-2004-0823 URL:http://secunia.com/advisories/17233  View
61133 9251 CVE-2004-0823 SECUNIA:21520  View
61134 9251 CVE-2004-0823 URL:http://secunia.com/advisories/21520  View
61135 9251 CVE-2004-0823 XF:openldap-crypt-gain-access(17300)  View

Related JVN