NVD

Id
71246  
Name
CVE-2004-0823  
Description
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-09-07  
Modified Date
2017-07-10  
Seq
2004-0823  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368105 71246 CVE-2004-0823 oval:org.mitre.oval:def:10703  View
368106 71246 CVE-2004-0823 http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm  View
368107 71246 CVE-2004-0823 ESB-2004.0559  View
368108 71246 CVE-2004-0823 RHSA-2005:751  View
368109 71246 CVE-2004-0823 APPLE-SA-2004-09-07  View
368110 71246 CVE-2004-0823 11137  View
368111 71246 CVE-2004-0823 openldap-crypt-gain-access(17300)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63024 JVNDB-2004-000366 OpenLDAP におけるハッシュ化されたパスワード認証を回避される脆弱性 OpenLDAP において、特定の認証スキームを使用して userPassword に保存された値を、平文として処理してしまう不備があるため、そのパスワード値を取得された場合、パスワード認証を回避される脆弱性が存在します。 CVE-2004-0823 9250 CVE-2004-0823 71246 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000366.html 2004-09-07 2007-04-01 View