{"id":"CVE-2004-0925","aliases":["EUVD-2004-0923","GHSA-fq92-p8q5-3756"],"status":"published","title":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the...","description":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01108,"percentile":0.66095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-10-28T04:00:00Z","modified":"2026-06-16T22:06:40Z","products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"mac_os_x_server"}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0925"},{"url":"https://github.com/advisories/GHSA-fq92-p8q5-3756"}],"sources":{"cve":[{"id":"CVE-2004-0925","description":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.","status":"published","published":"2004-10-28T04:00:00Z","modified":"2024-09-16T16:48:04.597Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-0923","description":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.","status":"published","published":"2004-10-28T04:00:00Z","modified":"2024-09-16T16:48:04Z","updated_at":"2026-11-03T00:55:48.234114Z"}],"ghsa":[{"id":"GHSA-fq92-p8q5-3756","title":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the...","description":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.","status":"published","published":"2022-04-29T02:58:37Z","modified":"2023-01-30T05:03:05Z","updated_at":"2026-11-02T14:46:46.047512Z"}],"nvd":[{"id":"CVE-2004-0925","description":"Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.","status":"published","published":"2005-01-27T05:00:00Z","modified":"2026-06-16T22:06:40.673Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.662124Z"}]}}