CVE-2004-1088

Published: Dec 2, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.

Affected (35)

Products: Apple: Darwin Streaming Server, Quicktime Streaming Server, Mac Os X, Mac Os X Server

Apple

4 products

Darwin Streaming Server

Quicktime Streaming Server

Mac Os X

Mac Os X Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Darwin Streaming Server	Version 4.1.3
Apple Darwin Streaming Server	Version 5.0.1
Apple Quicktime Streaming Server	Version 4.1.1

Configuration B

32 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.2.1
Apple Mac Os X	Version 10.2.2
Apple Mac Os X	Version 10.2.3
Apple Mac Os X	Version 10.2.4
Apple Mac Os X	Version 10.2.5
Apple Mac Os X	Version 10.2.6
Apple Mac Os X	Version 10.2.7
Apple Mac Os X	Version 10.2.8
Apple Mac Os X	Version 10.2
Apple Mac Os X	Version 10.3.1
Apple Mac Os X	Version 10.3.2
Apple Mac Os X	Version 10.3.3
Apple Mac Os X	Version 10.3.4
Apple Mac Os X	Version 10.3.5
Apple Mac Os X	Version 10.3.6
Apple Mac Os X	Version 10.3
Apple Mac Os X Server	Version 10.2.1
Apple Mac Os X Server	Version 10.2.2
Apple Mac Os X Server	Version 10.2.3
Apple Mac Os X Server	Version 10.2.4
Apple Mac Os X Server	Version 10.2.5
Apple Mac Os X Server	Version 10.2.6
Apple Mac Os X Server	Version 10.2.7
Apple Mac Os X Server	Version 10.2.8
Apple Mac Os X Server	Version 10.2
Apple Mac Os X Server	Version 10.3.1
Apple Mac Os X Server	Version 10.3.2
Apple Mac Os X Server	Version 10.3.3
Apple Mac Os X Server	Version 10.3.4
Apple Mac Os X Server	Version 10.3.5
Apple Mac Os X Server	Version 10.3.6
Apple Mac Os X Server	Version 10.3