CVE-2003-0378: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

Affected products

• Apple Mac OS X: up to and including 10.2

Published 2003-06-16. Last modified 2026-06-16.