CVE-2003-0174

Critical

Published: 12/05/2003(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

The LDAP name service in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

Risk Assessment

The lack of verification for the USERPASSWORD attribute poses a risk of unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to a newer version of IRIX that fixes the USERPASSWORD attribute verification and to implement additional security measures.

Original NVD description (English source)

The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.