CVE-2004-0823

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.

• http://secunia.com/advisories/12491/Patch, Vendor Advisory
• http://secunia.com/advisories/17233
• http://secunia.com/advisories/21520
• http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm
• http://www.auscert.org.au/render.html?it=4363Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-751.html
• http://www.securityfocus.com/advisories/7148Patch, Vendor Advisory
• http://www.securityfocus.com/bid/11137Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17300
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703
• http://secunia.com/advisories/12491/Patch, Vendor Advisory
• http://secunia.com/advisories/17233
• http://secunia.com/advisories/21520
• http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm
• http://www.auscert.org.au/render.html?it=4363Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-751.html
• http://www.securityfocus.com/advisories/7148Patch, Vendor Advisory
• http://www.securityfocus.com/bid/11137Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17300
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703

Published

Sep 7, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0817Multiple heap-based buffer overflows in the imlib BMP image …
• CVE-2004-0818Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0819The bridge functionality in OpenBSD 3.4 and 3.5, when runnin…
• CVE-2004-0820Winamp before 5.0.4 allows remote attackers to execute arbit…
• CVE-2004-0821The CFPlugIn in Core Foundation framework in Mac OS X allows…
• CVE-2004-0822Buffer overflow in The Core Foundation framework (CoreFounda…
• CVE-2004-0824PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local us…
• CVE-2004-0825QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4…
• CVE-2004-0826Heap-based buffer overflow in Netscape Network Security Serv…
• CVE-2004-0827Multiple buffer overflows in the ImageMagick graphics librar…
• CVE-2004-0828The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AI…
• CVE-2004-0829smbd in Samba before 2.2.11 allows remote attackers to cause…