Critical Published: Mar 29, 2004 Modified: Apr 03, 2025

CVE-2003-1009

10 CVSS SCORE

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.

CVSS Vector Details

Attack Vector Network

Attack Complexity Low

Confidentiality C

Integrity C

Availability C

Affected Software Configurations

o apple mac_os_x 10.0.2 * * * * * * *
o apple mac_os_x 10.0.3 * * * * * * *
o apple mac_os_x 10.2.8 * * * * * * *
o apple mac_os_x 10.3.2 * * * * * * *
o apple mac_os_x_server 10.2 * * * * * * *
o apple mac_os_x_server 10.2.1 * * * * * * *
o apple mac_os_x_server 10.2.2 * * * * * * *
o apple mac_os_x_server 10.2.3 * * * * * * *
o apple mac_os_x_server 10.2.4 * * * * * * *
o apple mac_os_x_server 10.2.5 * * * * * * *

Weaknesses (CWE)

NVD-CWE-Other

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

← Back to CVE Tracker