CVE-2004-0165

  • Last update: Apr 13, 2023

Description

Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.

Software From Fixed in
apple / mac_os_x 10.1 10.1.x
apple / mac_os_x 10.1.1 10.1.1.x
apple / mac_os_x 10.1.2 10.1.2.x
apple / mac_os_x 10.1.3 10.1.3.x
apple / mac_os_x 10.1.4 10.1.4.x
apple / mac_os_x 10.1.5 10.1.5.x
apple / mac_os_x 10.2 10.2.x
apple / mac_os_x 10.2.1 10.2.1.x
apple / mac_os_x 10.2.2 10.2.2.x
apple / mac_os_x 10.2.3 10.2.3.x
apple / mac_os_x 10.2.4 10.2.4.x
apple / mac_os_x 10.2.5 10.2.5.x
apple / mac_os_x 10.2.6 10.2.6.x
apple / mac_os_x 10.2.7 10.2.7.x
apple / mac_os_x 10.2.8 10.2.8.x
apple / mac_os_x 10.3 10.3.x
apple / mac_os_x 10.3.1 10.3.1.x
apple / mac_os_x 10.3.2 10.3.2.x
apple / mac_os_x_server 10.1 10.1.x
apple / mac_os_x_server 10.1.1 10.1.1.x
apple / mac_os_x_server 10.1.2 10.1.2.x
apple / mac_os_x_server 10.1.3 10.1.3.x
apple / mac_os_x_server 10.1.4 10.1.4.x
apple / mac_os_x_server 10.1.5 10.1.5.x
apple / mac_os_x_server 10.2 10.2.x
apple / mac_os_x_server 10.2.1 10.2.1.x
apple / mac_os_x_server 10.2.2 10.2.2.x
apple / mac_os_x_server 10.2.3 10.2.3.x
apple / mac_os_x_server 10.2.4 10.2.4.x
apple / mac_os_x_server 10.2.5 10.2.5.x
apple / mac_os_x_server 10.2.6 10.2.6.x
apple / mac_os_x_server 10.2.7 10.2.7.x
apple / mac_os_x_server 10.2.8 10.2.8.x
apple / mac_os_x_server 10.3 10.3.x
apple / mac_os_x_server 10.3.1 10.3.1.x
apple / mac_os_x_server 10.3.2 10.3.2.x

Details

    • Severity: Medium
  • CVE: CVE-2004-0165
  • Published: Mar 15, 2004
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N