CVE-2004-0165: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.

Affected products

• Apple Mac OS X: version 10.1 only; version 10.1.1 only; version 10.1.2 only; version 10.1.3 only; version 10.1.4 only; version 10.1.5 only; …
• Apple Mac OS X Server: version 10.1 only; version 10.1.1 only; version 10.1.2 only; version 10.1.3 only; version 10.1.4 only; version 10.1.5 only; …

Published 2004-03-15. Last modified 2026-06-16.