CVE-2003-0174: Sgi Irix

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

Affected products

• Sgi Irix: up to and including 6.5.19

Published 2003-05-12. Last modified 2026-06-16.