CVE-2005-0373: apple mac_os_x
CVSS: 7.5v2.0HighModified
AliasesDEBIAN-CVE-2005-0373
Published 13-02-2005Last modified 07-08-2024
Vulnerability summary
CVE-2005-0373 is a high (CVSS 7.5) vulnerability in apple mac_os_x. EPSS estimates a 3.92% chance of exploitation in the next 30 days, higher than 90.2% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v2.0 (NVD)EPSS score
3.92%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-02-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.92%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.92% on 18-09-2026
18-09-202618-10-2026
EPSS score3.92%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple2 products
- mac_os_x10.0 | 10.0.1 | 10.0.2 | 10.0.3 | 10.0.4 | 10.1 | 10.1.1 | 10.12 | 10.1.3 | 10.14 | 10.15 | 10.2 | 10.2.1 | 10.2.2 | 10.2.3 | 10.2.4 | 10.2.5 | 10.2.6 | 10.2.7 | 10.2.8 | 10.3 | 10.3.1 | 10.3.2 | 10.3.3 | 10.3.4 | 10.3.5 | 10.3.6 | 10.3.7 | 10.3.8
- mac_os_x_server10.0 | 10.1 | 10.1.1 | 10.1.2 | 10.1.3 | 10.1.4 | 10.1.5 | 10.2 | 10.2.1 | 10.2.2 | 10.2.3 | 10.2.4 | 10.2.5 | 10.2.6 | 10.2.7 | 10.2.8 | 10.3 | 10.3.1 | 10.3.2 | 10.3.3 | 10.3.4 | 10.3.5 | 10.3.6 | 10.3.7 | 10.3.8
Suse2 products
- suse_cvsup16.1h_36.i586
- suse_linux1.0 | 8.0 | 8.1 | 8.2 | 9.0 | 9.1 | 9.2
Conectiva1 product
- linux9.0 | 10.0
Cyrus1 product
- sasl1.5.24 | 1.5.27 | 1.5.28 | 2.1.9 | 2.1.10 | 2.1.11 | 2.1.12 | 2.1.13 | 2.1.14 | 2.1.15 | 2.1.16 | 2.1.17 | 2.1.18 | 2.1.18_r1
Debian1 product
- cyrus-sasl2< 2.1.19.dfsg1-0sarge2
Openpkg1 product
- openpkg2.1 | 2.2
Redhat1 product
- fedora_corecore_1.0
7 vendors · 9 products
References
9 links- www.monkey.org/openbsd/archive/ports/0407/msg00265.htmlMailing ListX Refsource MLISTPatchVendor Advisory
- bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171X Refsource CONFIRMVendor Advisory