CVE-2005-0373: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.

Affected products

• Apple Mac OS X: version 10.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.0.4 only; version 10.1 only; …
• Apple Mac OS X Server: version 10.0 only; version 10.1 only; version 10.1.1 only; version 10.1.2 only; version 10.1.3 only; version 10.1.4 only; …
• Conectiva Linux: version 9.0 only; version 10.0 only
• Cyrus Sasl: version 1.5.24 only; version 1.5.27 only; version 1.5.28 only; version 2.1.9 only; version 2.1.10 only; version 2.1.11 only; …
• Openpkg Openpkg: version 2.1 only; version 2.2 only
• Red Hat Fedora Core: version core_1.0 only
• Suse Suse Cvsup: version 16.1h_36.i586 only
• Suse Suse Linux: version 1.0 only; version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; …

Published 2004-10-07. Last modified 2026-06-16.