Description
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
References
- 11802 vdb-entry
- 13362 third-party-advisory
- APPLE-SA-2004-12-02 vendor-advisory
- postfix-crammd5-auth-replay(18353) vdb-entry
- P-049 third-party-advisory government-resource