← Database

CVE-2003-0881

HIGH CVSS: 7.5 Published: 2003-11-03 Modified: 2026-06-16

Description

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.

Affected Platforms

Apple Mac Os X

Weakness Type

NVD-CWE-Other

References