← Database

CVE-2003-0174

CRITICAL CVSS: 9.8 Published: 2003-05-12 Modified: 2026-06-16

Description

The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

Affected Platforms

Sgi Irix

Weakness Type

CWE-346

References