CVE-2004-0165

Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.

• http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
• http://www.atstake.com/research/advisories/2004/a022304-1.txtExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/841742Third Party Advisory, US Government Resource
• http://www.osvdb.org/6822
• http://www.securityfocus.com/bid/9730Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15297
• http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
• http://www.atstake.com/research/advisories/2004/a022304-1.txtExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/841742Third Party Advisory, US Government Resource
• http://www.osvdb.org/6822
• http://www.securityfocus.com/bid/9730Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15297

Published

Mar 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0159Format string vulnerability in hsftp 1.11 allows remote auth…
• CVE-2004-0160Synaesthesia 2.2 and earlier allows local users to execute a…
• CVE-2004-0161Multiple content security gateway and antivirus products all…
• CVE-2004-0162Multiple content security gateway and antivirus products all…
• CVE-2004-0163Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not c…
• CVE-2004-0164KAME IKE daemon (racoon) does not properly handle hash value…
• CVE-2004-0166Unknown vulnerability in Safari web browser for Mac OS X 10.…
• CVE-2004-0167DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not prope…
• CVE-2004-0168Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2,…
• CVE-2004-0169QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allo…
• CVE-2004-0171FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows …
• CVE-2004-0172Heap-based buffer overflow in the search_for_command functio…