CVE-2004-0430
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote...
CVE-2004-0430 is a medium vulnerability (CVSS 5.1) in Apple Mac Os X, published May 6, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 41.3%, the 98th percentile. No source names a fixed version.
- Severity
- 5.1 MediumCVSS 2.0, NVD
- Exploit chance
- 41.3%EPSS, 98th percentile
- Exploitation
- None known4 public exploits
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | AppleFileServer 10.3.3 (OSX) - LoginEXT PathName Overflow (Metasploit) | 2004-03-03 |
| Metasploit | AppleFileServer LoginExt PathName Overflow | 2004-05-03 |
| Exploit-DB | Apple Mac OSX 10.3.3 - AppleFileServer Overflow Remote Code Execution | 2004-08-13 |
| Exploit-DB | AppleFileServer (OSX) - LoginExt PathName Overflow (Metasploit) | 2010-09-20 |
What each source reports
NVD Score used
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
- Record
CVE-2004-0430- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
- Record
CVE-2004-0430- Updated
- 2026-11-02
EUVDEUVD-2004-0429No score
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
- Record
EUVD-2004-0429- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6fqr-wrf4-vr9rNo score
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote...
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
- Record
GHSA-6fqr-wrf4-vr9r- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
atstake.com/research/advisories/2004/a050304-1.txt
exchange.xforce.ibmcloud.com/vulnerabilities/16049
securitytracker.com/id?1010039
kb.cert.org/vuls/id/648406
securiteam.com/securitynews/5QP0115CUO.html
lists.apple.com/mhonarc/security-announce/msg00049.html
secunia.com/advisories/11539
nvd.nist.gov/vuln/detail/CVE-2004-0430
github.com/advisories/GHSA-6fqr-wrf4-vr9r