VULNERABILITY INTELLIGENCE

CVE-2003-0174

CVSS score9.8 CRITICAL
EPSS probability0.98%
CISA KEVNot currently listed
Published2003-05-12
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

Weakness classification

  • CWE-346: Origin Validation Error

Primary references