Unrated severityNVD Advisory· Published Nov 3, 2003· Updated Jun 16, 2026
CVE-2003-0881
CVE-2003-0881
Description
Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.
Affected products
3cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: <=10.3
- (no CPE)range: <10.3
- Range: <10.3
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- docs.info.apple.com/article.htmlnvdPatchVendor Advisory
- lists.apple.com/mhonarc/security-announce/msg00038.htmlnvd
News mentions
0No linked articles in our index yet.