VULNERABILITY INTELLIGENCE

CVE-2004-0925

CVSS score5 MEDIUM
EPSS probability1.11%
CISA KEVNot currently listed
Published2005-01-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

Primary references