CVE-2004-0823
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other...
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
Exploit likelihood
What each source reports
NVD Score used
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
- Record
CVE-2004-0823- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
- Record
CVE-2004-0823- Updated
- 2026-11-02
EUVDEUVD-2004-0821 No score
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
- Record
EUVD-2004-0821- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7rr4-25h7-4mj3 No score
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other...
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
- Record
GHSA-7rr4-25h7-4mj3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nss_ldapRed Hat:enterprise_linux:3::as |
before 0:207-17 | 0:207-17 |
nss_ldap-debuginfoRed Hat:enterprise_linux:3::as |
before 0:207-17 | 0:207-17 |
openldapRed Hat:enterprise_linux:3::as |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-clientsRed Hat:enterprise_linux:3::as |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-develRed Hat:enterprise_linux:3::as |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-serversRed Hat:enterprise_linux:3::as |
before 0:2.0.27-20 | 0:2.0.27-20 |
nss_ldapRed Hat:enterprise_linux:3::desktop |
before 0:207-17 | 0:207-17 |
nss_ldap-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:207-17 | 0:207-17 |
openldapRed Hat:enterprise_linux:3::desktop |
before 0:2.0.27-20 | 0:2.0.27-20 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldap-clientsRed Hat:enterprise_linux:3::desktop |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.27-20 | 0:2.0.27-20 |
nss_ldapRed Hat:enterprise_linux:3::es |
before 0:207-17 | 0:207-17 |
nss_ldap-debuginfoRed Hat:enterprise_linux:3::es |
before 0:207-17 | 0:207-17 |
openldapRed Hat:enterprise_linux:3::es |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-clientsRed Hat:enterprise_linux:3::es |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-develRed Hat:enterprise_linux:3::es |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-serversRed Hat:enterprise_linux:3::es |
before 0:2.0.27-20 | 0:2.0.27-20 |
nss_ldapRed Hat:enterprise_linux:3::ws |
before 0:207-17 | 0:207-17 |
nss_ldap-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:207-17 | 0:207-17 |
openldapRed Hat:enterprise_linux:3::ws |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-clientsRed Hat:enterprise_linux:3::ws |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.27-20 | 0:2.0.27-20 |
openldap-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.27-20 | 0:2.0.27-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0823 is a high vulnerability (CVSS 7.5) in Openldap, published September 7, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. Fixed in nss_ldap 0:207-17.
References
exchange.xforce.ibmcloud.com/vulnerabilities/17300
support.avaya.com/elmodocs2/security/ASA-2006-157.htm
redhat.com/support/errata/RHSA-2005-751.html
secunia.com/advisories/12491
securityfocus.com/bid/11137
auscert.org.au/render.html?it=4363
Show 19 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703
nvd.nist.gov/vuln/detail/CVE-2004-0823
github.com/advisories/GHSA-7rr4-25h7-4mj3
access.redhat.com/errata/RHSA-2005:751
marc.theaimsgroup.com?l=pamldap&m=112432721728160&w=2
bugzilla.redhat.com/show_bug.cgi?id=156386
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_751.json
cve.org/CVERecord?id=CVE-2004-0823