CVE-2003-0881

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could…

published October 30, 2003

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01379 · 71.7th percentile
Published
2003-10-30T05:00Z
EPSS history
Timeline
  • 30 OCT 05:00Z
    Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could…
    cvelistv5