Sign-up

ID

VAR-200311-0054


CVE

CVE-2003-0882


TITLE

Mac OS X Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200311-005

DESCRIPTION

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet. Mac OS X versions prior to 10.3 have a bug in initializing TCP timestamps with constants

Trust: 1.26

sources: NVD: CVE-2003-0882 // BID: 88203 // VULHUB: VHN-7707

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:lteversion:10.3

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.3

Trust: 0.6

vendor:applemodel:mac osscope:eqversion:x10.3

Trust: 0.3

sources: BID: 88203 // CNNVD: CNNVD-200311-005 // NVD: CVE-2003-0882

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2003-0882
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200311-005
value: MEDIUM

Trust: 0.6

VULHUB: VHN-7707
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2003-0882
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-7707
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-7707 // CNNVD: CNNVD-200311-005 // NVD: CVE-2003-0882

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2003-0882

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200311-005

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200311-005

EXTERNAL IDS

db:NVDid:CVE-2003-0882

Trust: 2.0

db:CNNVDid:CNNVD-200311-005

Trust: 0.7

db:BIDid:88203

Trust: 0.4

db:VULHUBid:VHN-7707

Trust: 0.1

sources: VULHUB: VHN-7707 // BID: 88203 // CNNVD: CNNVD-200311-005 // NVD: CVE-2003-0882

REFERENCES

url:http://docs.info.apple.com/article.html?artnum=61798

Trust: 2.0

url:http://lists.apple.com/mhonarc/security-announce/msg00038.html

Trust: 2.0

sources: VULHUB: VHN-7707 // BID: 88203 // CNNVD: CNNVD-200311-005 // NVD: CVE-2003-0882

CREDITS

Unknown

Trust: 0.3

sources: BID: 88203

SOURCES

db:VULHUBid:VHN-7707
db:BIDid:88203
db:CNNVDid:CNNVD-200311-005
db:NVDid:CVE-2003-0882

LAST UPDATE DATE

2024-08-14T14:48:12.238000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-7707date:2008-09-05T00:00:00
db:BIDid:88203date:2003-11-03T00:00:00
db:CNNVDid:CNNVD-200311-005date:2005-10-20T00:00:00
db:NVDid:CVE-2003-0882date:2008-09-05T20:35:30.483

SOURCES RELEASE DATE

db:VULHUBid:VHN-7707date:2003-11-03T00:00:00
db:BIDid:88203date:2003-11-03T00:00:00
db:CNNVDid:CNNVD-200311-005date:2003-11-03T00:00:00
db:NVDid:CVE-2003-0882date:2003-11-03T05:00:00