CVE-2004-0165

CVE-2004-0165 is a format string vulnerability in the Point-to-Point Protocol (PPP) daemon (pppd) version 2.4.0 and earlier, specifically affecting Apple Mac OS X 10.3.2 and earlier. This vulnerability allows unauthenticated remote attackers to read sensitive pppd process data, including authentication credentials like PAP or CHAP, potentially leading to privilege escalation. With a CVSS score of 5.0, it is considered a medium-severity vulnerability due to its low attack complexity and network-based attack vector, though it only impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.