CVE-2004-1089

Published: Dec 2, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.

Affected (35)

Products: Apple: Darwin Streaming Server, Quicktime Streaming Server, Mac Os X, Mac Os X Server

Apple

4 products

Darwin Streaming Server

Quicktime Streaming Server

Mac Os X

Mac Os X Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Darwin Streaming Server	Version 4.1.3
Apple Darwin Streaming Server	Version 5.0.1
Apple Quicktime Streaming Server	Version 4.1.1

Configuration B

32 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.2.1
Apple Mac Os X	Version 10.2.2
Apple Mac Os X	Version 10.2.3
Apple Mac Os X	Version 10.2.4
Apple Mac Os X	Version 10.2.5
Apple Mac Os X	Version 10.2.6
Apple Mac Os X	Version 10.2.7
Apple Mac Os X	Version 10.2.8
Apple Mac Os X	Version 10.2
Apple Mac Os X	Version 10.3.1
Apple Mac Os X	Version 10.3.2
Apple Mac Os X	Version 10.3.3
Apple Mac Os X	Version 10.3.4
Apple Mac Os X	Version 10.3.5
Apple Mac Os X	Version 10.3.6
Apple Mac Os X	Version 10.3
Apple Mac Os X Server	Version 10.2.1
Apple Mac Os X Server	Version 10.2.2
Apple Mac Os X Server	Version 10.2.3
Apple Mac Os X Server	Version 10.2.4
Apple Mac Os X Server	Version 10.2.5
Apple Mac Os X Server	Version 10.2.6
Apple Mac Os X Server	Version 10.2.7
Apple Mac Os X Server	Version 10.2.8
Apple Mac Os X Server	Version 10.2
Apple Mac Os X Server	Version 10.3.1
Apple Mac Os X Server	Version 10.3.2
Apple Mac Os X Server	Version 10.3.3
Apple Mac Os X Server	Version 10.3.4
Apple Mac Os X Server	Version 10.3.5
Apple Mac Os X Server	Version 10.3.6
Apple Mac Os X Server	Version 10.3